Creating an extended integration for Datadog users

Let Oomnitza be your single source of truth!

Choose from two Datadog user integrations in Oomnitza to gain complete visibility of your users as data from Datadog is automatically transformed into consumable information and actionable insights.

Datadog User Load: This integration retrieves user information utilizing the standard api.datadoghq.com endpoint.

DataDog Government Edition User Load: Specifically tailored for government-related operations, this integration retrieves user information utilizing the api.ddog-gov.com endpoint.

Connect Oomnitza and Datadog in minutes

Get the information and insights that you need to reduce costs and the time that you spend on administration tasks such as:

• Configurable dashboards and list views of key information
• Configurable workflows that you can create:
  • For deactivating underutilized SaaS accounts
  • For deleting the subscriptions of the SaaS accounts of employees who have left the company
  • For adding new users to Datadog
• Configurable reports to share information about users with your colleagues and management

Navigation

Before you start

Setting the Datadog global variables

Adding your Datadog credentials

Creating the user integration

Creating custom mappings

Creating workflows

SaaS User Role

Delete Users

Before you start

Best practice
For the integration with Oomnitza, create a dedicated user account.

Datadog's REST API uses API key authentication, and you will need to add the API key you generated in Datadog to Oomnitza.

To generate an API Key in Datadog:

1. Navigate to Organization settings, then click the API keys or Client Tokens tab.
2. Click the New Key or New Client Token button, depending on which you’re creating.
3. Enter a name for your key or token.
4. Click Create API key or Create Client Token.

You will also need to add a Datadog Application Key to Oomnitza. To add a Datadog application key, navigate to Organization Settings > Application Keys in Datadog. If you have the permission to create application keys, click New Key.

For further information, refer to the Datadog API documentation.

Setting the Datadog global variables

To save time entering information when you create workflows, you can add the Datadog Application Key as a global variable in Oomnitza.

1. From the menu, go to Configuration>General.
2. Click Global Settings.
3. Click Add new variable (+). 
4. Enter DataDog.Application_Key as the Key.
5. Enter your Datadog Application Key as the Value. This is the application key that you can create via Organization Settings > Application Keys in Datadog. This application key is different from the authentication API key.
6. Save your changes.
   

Adding your Datadog credentials

To stream Datadog user data into Oomnitza, complete the following steps:

1. In Oomnitza, click Configuration > Security > Credentials.
2. Click Add new credential (+).
3. Search for the integration, and then click the forward button > to select the integration.
4. Add your API key.
5. Click Create.

Integration not in the list? Click Advanced Mode and complete these steps:

1. Add the information details.
2. Click the AUTHORIZATION tab.
3. Ensure that API Key is selected as the Authorization type.
4. Ensure that the Token Name is DD-API-KEY
5. Enter the Datadog API Key. 
6. Ensure that Add to Header is selected.
7. To test the entered credential you may use the web service https://api.datadoghq.com/api/v1/validate
8. Click CREATE. 

Creating the user integration

1. In Oomnitza, click Configuration > Integrations > Overview.
2. Click Block view .
3. On the Integrations page, scroll down to the Extended section for user integrations.
4. Click NEW INTEGRATION.
5. In the sidebar, search for the integration.
6. Click ADD.

Integration details overview

More information is provided about the following fields to help you complete the integration:

• User only. Add user records.
• User plus SaaS user. Add user and SaaS user records. 

The benefit of adding SaaS user records is that you can run a workflow to validate the status and activity of SaaS users and retrieve information such as the role of the SaaS user. The information that can be retrieved depends on whether SaaS user workflows are available for the integration. 

Installation types

• Cloud. Store credentials in the Oomnitza cloud.
• Local. Store credentials locally. If you want to sync Oomnitza with vendor applications that require AWS or OAUTH authentication, select cloud as the type of installation. Local installations don't support AWS and OAuth authentication. 

Integration preferences

• Create & Update. Add and update records.
• Create only. Add records.
• Update only. Update records.

Editing the integration details

1. Click Edit .
2. Make your changes.

Editing the credential details

If you selected Cloud as the installation type, choose one of the following options:

• Select the credentials that were created for the integration.
• Edit the credentials that were created for the integration.
• Create new credentials

Scheduling the integration

By default, data is synced once every day. Change the interval or the time so that the data is streamed when your system isn't busy.

1. Click Edit .
2. Make and save your changes.

Mapping fields to Oomnitza

To map the fields to Oomnitza, click Edit .

  Selecting Edit integration to add rules for syncing data. Filtering integration results.  
 

You can add new fields to your integration by selecting Add new field   on the mapping page. 
Creating custom API fields. 

Creating custom mappings

Map the Datadog fields to Oomnitza fields and create custom mappings to get the user information that you need.

Create custom mappings and assign a sync key

1. Click Smart Mapping to automatically detect appropriate mapping fields. Values from the integration can also be dragged to the appropriate field on the Oomnitza side, or selected from the integration field dropdown.
2. You have the option to create custom mappings to map any other field that you want to add to Oomnitza. To create an optional custom mapping, do the following:
   1. Click the down arrow on the field that you want to map.
   2. Select Add new Oomnitza users field.
   3. Change the name of the field.
   4. Click CREATE. 
3. Ensure that the Email is mapped to the
   1. Username field on the Oomnitza side (required for integration).
   2. Email field on the Oomnitza side (required for integration).
4. Select the Role field on the Oomnitza mapping side.
5. Choose a suitable role from the list (a defined role is necessary for the integration)
6. Assign a sync key to a unique field, such as the Email.
7. Click UPDATE.

Standard Datadog to Oomnitza mappings

The following Datadog fields can be mapped to Oomnitza:

Connector Sync Time
Created at Timestamp
Disabled?
Email
Id
Name
Status
User type

Launching the integration

Your integration is in Draft mode until the required mandatory fields are added. When added, click Launch to activate your integration. 

If you selected Cloud as the installation type when creating the integration, see Running an extended integration

If you selected Local as the installation type when creating the integration, see Running an extended integration locally.

Viewing data ingested by Oomnitza

Viewing ingested asset data

For asset integrations, click Hardware. If the asset integration also ingests software data, click Software.

Viewing ingested user data

For user integrations, click People. If you chose the option to ingest User and SaaS user data, click Software > SaaS, click the SaaS app, and then click the Users tab. 

Related Links

• Running an extended integration
• Troubleshooting integrations
• Mapping extended integrations

Creating workflows

Before you create workflows to get actionable insights, you must retrieve information about SaaS users. 

SaaS user role

1. Click Configuration > Workflows 
2. Click Add (+) and select Software SaaS Users from the list.
3. Enter the name of the workflow such as Retrieve Datadog SaaS information. You can also enter a description of the workflow so you know what the purpose of the workflow is.

Edit the begin block

The begin block is the workflow’s trigger. In this case, you create a workflow that retrieves SaaS user information from Datadog.

1. Click Edit.
2. Enter a name of the begin block. 
3. Configure the schedule so that the user information is streamed to Oomnitza when your system is least busy.
4. Select run for Active records.
5. Click Add Rule and add this rule: SaaS name = Datadog.
6. Click Save.

Learn more about the Begin block

Edit the SaaS User Role retrieval block

1. Drag and drop the SaaS User Role retrieval block onto the Sandbox, and then click Edit.
2. Search for Datadog User Role and click the arrow (>).
3. Complete the following actions:
1. Select your Datadog Credentials that you created in Adding your Datadog credentials.
2. Enter your Datadog Application Key.

By default, the Deactivate checkbox is selected. This means that information about SaaS user accounts that were deactivated in Datadog won’t be uploaded to Oomnitza.

Learn more about the SaaS user role.

Tip
You can add additional features to your workflow. For example, you can add a Notify block to send messages. See Adding metadata to a Notify block.

Connect the blocks

1. Save your changes and link the boxes to create the workflow.
2. Validate, launch, and save your workflow.

Result

To retrieve your results, complete the following steps:

1. Click Software from the menu.
2. Select the SaaS tab, and select your software entry for Datadog.
3. Click Users in the side pane.
4. The Role column will be populated with that the user details to confirm that this user has been found in your Datadog SaaS.

Delete users

You can easily create a workflow in Oomnitza to delete SaaS users in Datadog.

1. To create a new workflow, complete the steps in the SaaS user role section.
2. Edit the Begin block, and add rules to specify the criteria that you want to use for deactivating users such as:
1. SaaS name = Datadog
2. Last login date Days before 30
3. Save your changes.
4. Drag and drop the API block onto the sandbox.
5. Click Edit.
6. Search for Datadog Delete User and click the arrow (>).
7. Complete the following actions:
1. Select your Datadog Credentials that you created in Adding your Datadog credentials.
2. Enter your Datadog Application Key. You don’t need to do this if you have followed the steps in Setting the Datadog global variables.
8. Save your changes and link the boxes to create the workflow.
9. Save, validate, and activate your workflow.

Result
The SaaS account matching the criteria specified in the Begin block is deactivated when the workflow is run. 

Reference articles for creating workflows

• Creating SaaS user workflows.
• Offboarding SaaS users.

Unleash the power of Oomnitza

To get valuable actionable insights that help you manage your assets, learn how to:

• Configure dashboards for your users and software
• Configure custom reports about your users and software
• Create workflows to automate tasks

See  Getting started for more information.