Skip to content

DOCS-12234 add mapping limit #32023

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
+5 −2
Open

DOCS-12234 add mapping limit #32023

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
ff60fd8
DOCS-12234 add mapping limit
urseberry Oct 6, 2025
cc48994
Change to active voice
urseberry Oct 6, 2025
0fc4bbe
Make wording clearer
urseberry Oct 6, 2025
0269e05
Fix typo
urseberry Oct 6, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions content/en/account_management/saml/mapping.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,12 +15,14 @@ You can map attributes to the following principals:
- [Datadog roles][1]
- [Datadog Teams][2]

Users with the Access Management permission can assign or remove Datadog principals based on a user's SAML-assigned attributes.
Setting up a mapping from SAML attributes to Datadog entities allows you to manage users solely in your identity provider. The system then provisions users in Datadog according to the mappings you set up.

Setting up a mapping from SAML attributes to Datadog entities allows you to manage users solely in your identity provider. The system then provisions users in Datadog according to the mappings you set up.
You can create a maximum of 1000 role mappings and 1000 team mappings in each organization. If your organization needs more mappings, reach out to [Support][8].

## Prerequisites

Users with the Access Management permission can assign or remove Datadog principals based on a user's SAML-assigned attributes.

It's important to understand what is sent in an assertion before turning on mappings, as mappings require correct attributes. Every IdP has specific mappings. For example, Azure works with object IDs, and Okta requires you to set attributes in [Okta settings][3]. Datadog recommends cross-referencing with [built-in browser tooling][4] such as Chrome DevTools or browser extensions and [validating your SAML assertions][5] **before** creating mappings.

## Map SAML attributes to Datadog roles
Expand Down Expand Up @@ -72,3 +74,4 @@ Make changes to a mapping by clicking the pencil (**Edit**) icon, or remove a ma
[5]: https://www.samltool.com/validate_response.php
[6]: /account_management/authn_mapping/
[7]: /account_management/teams/#choose-provisioning-source
[8]: /help/
Loading