Connect & Integrate Datadog

Last updated: May 14, 2026

Use the Datadog integration to import users and teams, create and update users, deactivate users, reactivate previously disabled users, send Datadog invitation emails, and manage Datadog team memberships from YeshID.

Before you begin

Make sure you have:

  • Access to Datadog organization settings

  • Permission to create or view API keys

  • Permission to create or view application keys

  • A Datadog application key owned by an administrator or another user with the required user-management permissions

You will need three values during setup:

  • Datadog Region

  • API Key

  • Application Key

Step 1: Choose your Datadog region

In YeshID, select the Datadog region that matches the Datadog site you sign in to.

Region mapping:

  • US -> https://api.datadoghq.com (https://app.datadoghq.com)

  • US3 -> https://api.us3.datadoghq.com (https://us3.datadoghq.com)

  • US5 -> https://api.us5.datadoghq.com (https://us5.datadoghq.com)

  • EU -> https://api.datadoghq.eu (https://app.datadoghq.eu)

  • AP1 -> https://api.ap1.datadoghq.com (https://ap1.datadoghq.com)

  • AP2 -> https://api.ap2.datadoghq.com (https://ap2.datadoghq.com)

  • US1-FED -> https://api.ddog-gov.com (https://app.ddog-gov.com)

If you are not sure which one to use, match it to your Datadog sign-in URL.

Step 2: Create a Datadog API key

  1. Sign in to Datadog.

  2. Go to Organization Settings.

  3. Open API Keys.

  4. Click New Key.

  5. Give the key a recognizable name such as YeshID Provisioning.

  6. Copy the API key value.

You will paste this into the API Key field in YeshID.

Step 3: Create a Datadog application key

  1. In Datadog, go to Organization Settings.

  2. Open Application Keys.

  3. Click New Key.

  4. Give the key a recognizable name such as YeshID Provisioning.

  5. Copy the application key value.

You will paste this into the Application Key field in YeshID.

Datadog may only show the full application key value once, so copy it immediately.

Step 4: Confirm permissions

Make sure the owner of the Datadog application key has the permissions needed for the actions you want YeshID to run.

Common permissions include:

  • user_access_read for importing users and reading user details

  • user_access_invite for creating users and sending Datadog invitation emails

  • user_access_manage for updating users, reactivating users, and deactivating users

  • teams_read for importing Datadog teams

If you plan to manage Datadog team memberships from YeshID, make sure the key owner can also manage team membership in your Datadog environment.

Step 5: Enter the Datadog connection details in YeshID

When configuring the Datadog integration in YeshID, enter these on the same authentication screen:

  • Datadog Region

  • API Key

  • Application Key

Then save the integration.

You will also see a required-scopes instruction block above the Application Key input:

  • user_access_read

  • user_access_invite

  • teams_read

  • user_access_manage

Step 6: Test the connection

After saving the integration:

  1. run an import test

  2. confirm that users are returned

  3. if you plan to use team sync, confirm that Datadog teams are returned as groups

If the connection succeeds, you can enable the provisioning actions you want to use.

Supported Datadog actions

Depending on your YeshID workflow and configuration, Datadog can support:

  • Import Users

  • Get User

  • Create User

  • Update User

  • Activate User

  • Deactivate User

  • Invite User

  • Import Groups

  • Add To Group

  • Remove From Group

In this integration, Datadog teams are treated as groups.

Important behavior notes

  • Creating a user and inviting a user are separate actions in Datadog.

  • YeshID can create the Datadog user first and then send the Datadog invitation email as a separate step.

  • Deactivating a user in Datadog does not fully hard-delete the user. Datadog keeps the user record in a disabled state.

  • If a user already exists in Datadog, YeshID can match the existing user instead of failing on duplicate creation.

  • If a user already exists but is disabled, YeshID can reactivate that user instead of creating a second account.

Troubleshooting

I do not know which API Base URL to use

Use the Datadog site you already sign in to and select the matching Datadog Region.

User import returns no users

Check that:

  • the selected Datadog region matches your Datadog site

  • the API key and application key are both valid

  • the application key owner has user_access_read

Team import fails

Check that:

  • the application key owner has teams_read

  • the Datadog organization actually uses teams

  • the selected Datadog region matches your Datadog site

User creation fails because the user already exists

Datadog may return an "already exists" error if the user is already present or was previously disabled. In that case, YeshID can look up the existing Datadog user and continue with the existing account instead of creating a duplicate.

References