Configuring Azure AD as a SAML IdP
Security Monitoring is now available Security Monitoring is now available

Configuring Azure AD as a SAML IdP

Below is a step by step guide to configure Azure AD as a SAML IdP within Datadog: Note: an Azure AD Premium Subscription is required to set this up

Configuration

  1. Navigate to https://portal.azure.com/.

  2. When logged into Azure, go to the Azure Active Directory tab on the left hand menu.

  3. Select the Enterprise applications service.

  4. Click on the New application button.

  5. Select the Non-gallery application.

    Non Gallery application

  6. Name it (e.g DatadogSSO_test).

  7. Click on Add.

  8. Once your application is successfully added, go in Configure single sign-on (required).

  9. Select the SAML-based Sign-on as Single Sign-on Mode.

    Saml Based Sign on

  10. Navigate to the Datadog SAML page, find the Service Provider Entity ID & Assertion Consumer Service URL on the right hand of the page. Copy and paste those values in the Identifier and Reply URL text forms respectively: In Datadog:

    Step10Redo

    In the Azure portal:

    Set value azure

  11. Set user.mail as the value for User Identifier:

    User Identifier

  12. Enter your Notification Email at the bottom of the page. When the active signing certificate approaches its expiration date, notifications are sent to this email address with instructions on how to update the certificate:

    Notification email

  13. Click at the bottom of the page on Step 5, Configure DatadogSSO_test.

  14. Scroll down to Step 3 of the Configure DatadogSSO_test for single sign on section, and download the SAML XML Metadata file.

  15. Go to the top of your SSO Configuration section and click Save.

  16. Navigate back to Datadog SAML page and upload the SAML XML Metadata file downloaded in Step 14:

    SAML_Configuration___Datadog10

  17. Make sure to press the Upload File button after having chosen the XML file to upload.

  18. And that’s it! It should now say SAML is ready and that valid IdP metadata is installed.

    SAML_Configuration___Datadog11

  19. Begin to log in to Datadog via Azure AD by pressing Enable:

    SAML_Configuration___Datadog12

Optional

If you are using an SSO via a Datadog button or link, you need to add a Sign-on URL. To do this, navigate back to the SSO Configuration section of the Azure Application (Step 8) and check off Show advanced URL settings:

Then paste the Single Sign-on URL that is displayed in the Datadog SAML page.

SAML_Configuration___Datadog13

Further Reading

Additional helpful documentation, links, and articles:

Configure SAML for your Datadog accountDOCUMENTATION more more Configuring Teams & Organizations with Multiple AccountsDOCUMENTATION more more
edit Edit

On this Page