Configuring Google as a SAML IdP

Setting up Google as a SAML IdP

See the dedicated Google instructions

For the “Service Provider Details”

Pre-requisite: IDP initiated SSO must be checked on Datadog SAML Configuration page

• Application Name: Can be anything
• Description: Can be anything
• ACS URL: Use the url shown under “Assertion Consumer Service URL” on https://app.datadoghq.com/saml/saml_setup (the one containing /id/). If there is more than one value shown for Assertion Consumer Service URL, only enter one of them here.
• Entity ID: https://app.datadoghq.com/account/saml/metadata.xml
• Start URL: Can be blank, or use the “Single Sign On Login URL” listed on https://app.datadoghq.com/saml/saml_setup and https://app.datadoghq.com/account/team
• Signed Response: Leave unchecked
• Name ID: “Basic Information” “Primary Email”

For the “Attribute Mapping”

• “urn:oid:1.3.6.1.4.1.5923.1.1.1.6” “Basic Information” “Primary Email”

Also add:

• “urn:oid:2.5.4.4” “Basic Information” “Last Name”
• “urn:oid:2.5.4.42” “Basic Information” “First Name”

Further Reading

Additional helpful documentation, links, and articles:

Configure SAML for your Datadog accountDOCUMENTATION Configuring Teams & Organizations with Multiple AccountsDOCUMENTATION