Google SAML IdP

Setting up Google as a SAML IdP

See the dedicated Google instructions

Service provider details

Pre-requisite: IDP initiated SSO must be checked on Datadog SAML Configuration page

  • Application Name: Can be anything
  • Description: Can be anything
  • ACS URL: Use the url shown under “Assertion Consumer Service URL” on https://app.datadoghq.com/saml/saml_setup (the one containing /id/). If there is more than one value shown for Assertion Consumer Service URL, only enter one of them here.
  • Entity ID: https://app.datadoghq.com/account/saml/metadata.xml
  • Start URL: Can be blank, or use the “Single Sign On Login URL” listed on https://app.datadoghq.com/saml/saml_setup and https://app.datadoghq.com/account/team
  • Signed Response: Leave unchecked
  • Name ID: “Basic Information” “Primary Email”

Attribute mapping

  • “urn:oid:1.3.6.1.4.1.5923.1.1.1.6” “Basic Information” “Primary Email”

Also add:

  • “urn:oid:2.5.4.4” “Basic Information” “Last Name”
  • “urn:oid:2.5.4.42” “Basic Information” “First Name”
zAttributeMapping

Further Reading

Additional helpful documentation, links, and articles:

Configure SAML for your Datadog accountDOCUMENTATION more more Configuring Teams & Organizations with Multiple AccountsDOCUMENTATION more more