Prerequisites
- A Pro or Enterprise account with Datadog
- Sign in to the Zoho One Admin Panel.
- Go to Marketplace, then use the search bar to find and install Datadog.
- If you want to test the SAML configuration before allowing users to access Datadog, uncheck Display app to users.
- Click Add.
- Click Manage Application, then Single Sign-On.
- Click Service Provider Details to check and verify the SP details. You can also edit them, if needed.
- Click Identity Provider Details, then download the IDP Metadata file.
- Sign in to your Datadog account.
- Hover over your username, then click Configure SAML.
- Upload the IdP Metadata file under Start by uploading your Identity Provider (IdP) metadata.
- Click Enable.
- Check Identity Provider (IdP) Initiated Login under Additional Features.
- Click Save.
Just-in-time provisioning
Just-in-time (JIT) provisioning creates a Datadog account for users during their first SSO attempt, so you don't have to do it manually for each user.
To enable JIT provisioning:
- Sign in to your Datadog account.
- Hover over your username, then click Configure SAML.
- Scroll down to Additional Features.
- Enter your domain under Just-in-Time Provisioning, then click Add Domain. Users with email addresses belonging to this domain will be automatically provisioned a Datadog account.
- Use the dropdown list under Domains for JiT provisioning to designate the automatically provisioned users as Standard Users, Admin Users, or Read-Only Users.
- Click Save.
Test the SAML connection
- Return to the Zoho One Admin Panel.
- Go to Applications, then click Datadog.
- Click Assign Users, choose yourself from the list, then click Assign.
- Click . If everything is working, you should be automatically signed in and taken to Datadog's homepage.
Enforce SAML SSO
After successfully testing SSO, you can enforce it for all users. Once this is done, your users will no longer be able to sign in using their Datadog credentials. To restrict users to SSO:
- Sign in to your Datadog account.
- Hover over your username, then click Configure SAML.
- Check SAML Strict Mode under Additional Features.
- Click Save.
Make app visible to all users
After successfully testing the SSO, you can make Datadog available for all users to access from their My Apps pages.
To make Datadog visible to all users:
- Sign in to the Zoho One Admin Panel.
- Go to Applications, then click Datadog.
- Click Edit, check Display app to users, then click Update.
- You can now access Datadog from Zoho One's My Apps page.