Setting up Google as a SAML IdP

See the dedicated Google instructions

Service provider details

As a prerequisite, IDP initiated SSO must be checked on the Datadog SAML configuration page.

Application Name

Can be anything

Description

Can be anything

ACS URL

Use the URL shown under Assertion Consumer Service URL on the SAML setup page (the one containing /id/). If there is more than one value shown for Assertion Consumer Service URL, only enter one of them here.

Entity ID

Use the URL shown under Entity ID on the SAML setup page.

Start URL

Can be blank, or use the Single Sign On Login URL listed on the SAML setup page.

Signed Response

Leave unchecked

Name ID

Select Basic Information and Primary Email

Attribute mapping

• “urn:oid:1.3.6.1.4.1.5923.1.1.1.6” “Basic Information” “Primary Email”

Also add:

• “urn:oid:2.5.4.4” “Basic Information” “Last Name”
• “urn:oid:2.5.4.42” “Basic Information” “First Name”

Further Reading

Additional helpful documentation, links, and articles:

Configure SAML for your Datadog accountDOCUMENTATION Configuring Teams & Organizations with Multiple AccountsDOCUMENTATION