Overview

Datadog Synthetic Monitoring enables proactive monitoring of web applications and APIs using Kerberos SSO authentication with Microsoft Active Directory. This allows continuous testing of critical user journeys and HTTP endpoints on your internal Windows sites.

Prerequisites

• A Windows site with Kerberos authentication integrated with Active Directory (usually hosted on IIS).
• A Windows server that is domain-joined to the Active Directory.
• A domain user account with Active Directory authentication access to the Windows site.
• Synthetic Monitoring tests must run on a Windows private location that is configured to authenticate with Active Directory. For more information, see the Windows private locations prerequisites documentation.

Installation

1. Create your Windows private location on the Windows server joined to the Active Directory domain.
2. Set up the Synthetic Monitoring private location worker to run as a Windows service.
3. Configure the private location service to use your Active Directory domain account credentials:
   • Open services.msc, navigate to Datadog Synthetics Worker > Properties > log on > this account, and enter your domain account credentials.
4. Configure your tests to run from the Windows private location (managed locations do not support Kerberos authentication).

No further configuration is necessary for Browser Tests.

5. Optionally, for API tests, you must also set the Domain field to your Active Directory domain name under the Kerberos tab. Navigate to Create/Edit API Test > Define Request > Advanced Options > Authentication.

Further Reading

お役に立つドキュメント、リンクや記事:

Monitor your Synthetic private locations with DatadogBLOG Proactively monitor Kerberos-authenticated web apps and APIs with Datadog SyntheticsBLOG Learn about Passkeys in Browser TestsGUIDE