skills.rest
lauhon
lauhonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

saml-configuration

Configure SAML Single Sign-On in Datadog by uploading Identity Provider metadata XML files.

5|2|Updated Mar 9, 2026
Search Tags:#authentication#datadog#sso#saml#okta#identity provider#metadata upload
One-click install
npx skills add https://github.com/lauhon/pi --skill saml-configuration-lauhon
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: saml-configuration
Source: https://github.com/lauhon/pi/tree/main/skills/saml-configuration
Command: npx skills add https://github.com/lauhon/pi --skill saml-configuration-lauhon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Setting up SAML Single Sign-On for Datadog requires coordinating IdP metadata, certificates, and role mappings across systems, and misconfiguration can lock users out of the organization. This Skill guides the upload of Identity Provider metadata and the surrounding setup workflow with clear, IdP-specific instructions. ## Core Features & Use Cases - IdP Metadata Upload: Upload or replace Identity Provider metadata XML files to configure or update SAML SSO via the pup CLI. - IdP-Specific Guidance: Step-by-step setup instructions for Okta, Azure AD, Google Workspace, and other identity providers, including required SAML attributes. - Troubleshooting & Security: Diagnose login failures, certificate expiration, and role assignment issues with documented error resolutions. - Use Case: An administrator needs to enable SSO with Okta. They download the IdP metadata XML, upload it with pup saml upload-metadata, then create authentication mappings so Okta groups map to Datadog roles. ## Quick Start Upload my Okta IdP metadata file at /path/to/idp-metadata.xml to configure SAML SSO for my Datadog organization.

Frequently Asked Questions about saml-configuration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up SAML SSO in Datadog with Okta?▼

Download the Identity Provider metadata XML from the Okta Admin Console under your Datadog app's Sign On tab, then run pup saml upload-metadata with the file path. Finally, create authentication mappings to assign Datadog roles based on Okta groups.

How do I update SAML configuration when my IdP certificate expires?▼

Download fresh metadata containing the new certificate from your identity provider and upload it with pup saml upload-metadata. Datadog can accept both old and new certificates during the transition, allowing rotation without login disruption.

What permissions are required to configure SAML in Datadog?▼

The Datadog Application key must have org_management permissions, and both DD_API_KEY and DD_APP_KEY environment variables must be set. Only users with organization management rights can modify SAML configuration.

Why does SAML login fail with an invalid response error?▼

Invalid SAML response errors usually mean the IdP metadata is outdated, the signing certificate expired, or the SAML response is not properly signed. Upload current metadata from your IdP and verify the certificate is valid.

What SAML attributes does Datadog require from the identity provider?▼

Datadog requires an email attribute and a username attribute in SAML assertions. Sending group claims such as http://schemas.xmlsoap.org/claims/Group is recommended so authentication mappings can assign roles based on IdP group membership.

Related Skills

Explore More Software Engineering Skills→
ColdBoxColdBox

coldbox-security-sso

Configure OAuth2/OpenID Connect SSO for ColdBox applications using the cbsso module.

Official
Advanced
alexmaruccialexmarucci

saml-configuration

Manage Datadog SAML SSO configuration and IdP metadata uploads.

Community
Intermediate
chatbotkitchatbotkit
13

hunt-saml

Test SAML endpoints for XSW, NameID manipulation, signature stripping, and XXE vulnerabilities.

Official
Advanced
marcboggsmarcboggs

browser-auth-testing

Tests browser-based authentication flows and web vulnerabilities using Playwright MCP browser automation.

Community
Intermediate