Skip to content

Commit ff60fd8

Browse files
committed
DOCS-12234 add mapping limit
1 parent df67cc9 commit ff60fd8

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

content/en/account_management/saml/mapping.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,12 +15,14 @@ You can map attributes to the following principals:
1515
- [Datadog roles][1]
1616
- [Datadog Teams][2]
1717

18-
Users with the Access Management permission can assign or remove Datadog principals based on a user's SAML-assigned attributes.
18+
Setting up a mapping from SAML attributes to Datadog entities allows you to manage users solely in your identity provider. The system then provisions users in Datadog according to the mappings you set up.
1919

20-
Setting up a mapping from SAML attributes to Datadog entities allows you to manage users solely in your identity provider. The system then provisions users in Datadog according to the mappings you set up.
20+
There is a limit of 1000 role and 1000 team mappings for each organization. If your organization needs more mappings, reach out to [Support][8].
2121

2222
## Prerequisites
2323

24+
Users with the Access Management permission can assign or remove Datadog principals based on a user's SAML-assigned attributes.
25+
2426
It's important to understand what is sent in an assertion before turning on mappings, as mappings require correct attributes. Every IdP has specific mappings. For example, Azure works with object IDs, and Okta requires you to set attributes in [Okta settings][3]. Datadog recommends cross-referencing with [built-in browser tooling][4] such as Chrome DevTools or browser extensions and [validating your SAML assertions][5] **before** creating mappings.
2527

2628
## Map SAML attributes to Datadog roles
@@ -72,3 +74,4 @@ Make changes to a mapping by clicking the pencil (**Edit**) icon, or remove a ma
7274
[5]: https://www.samltool.com/validate_response.php
7375
[6]: /account_management/authn_mapping/
7476
[7]: /account_management/teams/#choose-provisioning-source
77+
[8]: /help/

0 commit comments

Comments
 (0)