SaaS Management: Datadog Connector

JumpCloud® SaaS Management gives you visibility and control over shadow IT and SaaS app use within your org. Connectors detect shadow IT without adoption of a browser extension and provide a significant increase to the valuable usage and security insights.

The Datadog Connector retrieves users lists and data from the Datadog API, enabling seamless integration with third-party apps authenticated via Datadog credentials. It captures new users and login events via periodic polling for real-time updates. This connector also ensures data integrity and security because it is configured via OAuth with read-only permissions.

Prerequisites

• To configure the connector, you must be a Datadog admin to create API and Application keys.

Considerations

• Based on your organization’s size, the initial collection of data may take some time, up to an hour. 

Configuring Datadog

1. In Datadog, hover over the user profile picture in the Datadog UI.
2. Note the domain name of your Datadog instance, for example: api.datadoghq.eu.
   1. api is the subdomain.
   2. datadoghq.eu is the site.
3. Go to API Keys. Click New Key and then Finish.
4. Go to Application Keys and click New Key.
5. Click EditScope. Under Access Management, configure the following settings:
   1. Enable org_management.
   2. Enable user_access_read
6. Click Save and then Finish.
7. Copy both keys to use for configuring JumpCloud.

Configuring JumpCloud

1. Log in to the JumpCloud Admin Portal.
2. Go to SECURITY MANAGEMENT > SaaS Management.
3. In SaaS Management settings, go to the Connector tab and select + Add Connector.
   

4. Select Datadog and click Connect. 
5. Enter a name and click Connect.
6. Paste the keys copied in the previous section to Datadog App Key and Datadog API Key fields.
7. Click Save Connector.
8. You will now see Datadog in your list of Connectors.

Required Permissions

• Permission List
  • org_management: View which organizations can query data from your organization. Query data from other organizations.
  • user_access_read: View users and their roles and settings.
• Permission Scope
  • org_management: Get basic organization details 
  • user_access_read: Get users to populate SaaS Management accounts

Uninstall/Remove

• On the Connector’s detail page, click on Delete Connector and follow the prompts.

• To revoke the permissions granted to JumpCloud, go to Datadog > API Keys and click on the Trash icon and then Revoke and Confirm. Perform the same steps under Application Keys.