Configuring Login Methods

Configuring Login Methods

Login Methods are how users are able to authenticate themselves and log into your Datadog organization. If you have privileged access permission, as with the Datadog Admin Role, you can use Login Methods to enable and disable the default login methods for users in your organization.

When a login method is enabled by default, any user who is not explicitly denied access (by a user login method override) can use that login method to access Datadog, provided their username (their email address) matches the user that is invited to the organization.

The following login methods are available:

  • Datadog Username and Password (also known as Standard)
  • Sign in with Google
  • Sign in with SAML

Enabling or disabling a default login method

As an organization manager you can enable or disable the default login methods for your organization. New organizations start with Datadog Username and Password and Sign in with Google enabled and configured for all organizations and users. After you configure SAML, Sign in with SAML is also enabled.

  1. Navigate to Login Methods.
  2. Set the Enabled by Default setting for each method to On or Off, according to your organization’s preference or policy requirements.
  3. Confirm your selection.

Note: You cannot disable all login methods for an organization. At least one login method must be enabled by default for your organization.

Reviewing user overrides

Using overrides, you can change the available login methods for individual users. In the following example, Sign in with Google is Off by default in the organization, but one user has it enabled by having an override set.

In User Management, you can filter users by the override methods set, or view users who have the Default login methods enabled:

You can edit the user’s overrides or remove the override altogether to allow the user to only use the defaults. For more information see Edit a user’s login methods.