published on Tuesday, Sep 15, 2026 by Pulumi
published on Tuesday, Sep 15, 2026 by Pulumi
Provides a Datadog SAML IdP metadata resource. This can be used to upload or replace the identity provider (IdP) metadata used for the organization’s SAML login configuration. An organization has at most one SAML configuration. Note: the uploaded metadata XML cannot be read back from the Datadog API, so changes made outside of Terraform to the metadata content are not detected. Destroying this resource removes it from Terraform state but does not remove the IdP metadata from Datadog.
Create SamlIdpMetadata Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new SamlIdpMetadata(name: string, args: SamlIdpMetadataArgs, opts?: CustomResourceOptions);@overload
def SamlIdpMetadata(resource_name: str,
args: SamlIdpMetadataArgs,
opts: Optional[ResourceOptions] = None)
@overload
def SamlIdpMetadata(resource_name: str,
opts: Optional[ResourceOptions] = None,
idp_metadata: Optional[str] = None)func NewSamlIdpMetadata(ctx *Context, name string, args SamlIdpMetadataArgs, opts ...ResourceOption) (*SamlIdpMetadata, error)public SamlIdpMetadata(string name, SamlIdpMetadataArgs args, CustomResourceOptions? opts = null)
public SamlIdpMetadata(String name, SamlIdpMetadataArgs args)
public SamlIdpMetadata(String name, SamlIdpMetadataArgs args, CustomResourceOptions options)
type: datadog:SamlIdpMetadata
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "datadog_saml_idp_metadata" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args SamlIdpMetadataArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SamlIdpMetadataArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SamlIdpMetadataArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SamlIdpMetadataArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SamlIdpMetadataArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var samlIdpMetadataResource = new Datadog.SamlIdpMetadata("samlIdpMetadataResource", new()
{
IdpMetadata = "string",
});
example, err := datadog.NewSamlIdpMetadata(ctx, "samlIdpMetadataResource", &datadog.SamlIdpMetadataArgs{
IdpMetadata: pulumi.String("string"),
})
resource "datadog_saml_idp_metadata" "samlIdpMetadataResource" {
lifecycle {
create_before_destroy = true
}
idp_metadata = "string"
}
var samlIdpMetadataResource = new SamlIdpMetadata("samlIdpMetadataResource", SamlIdpMetadataArgs.builder()
.idpMetadata("string")
.build());
saml_idp_metadata_resource = datadog.SamlIdpMetadata("samlIdpMetadataResource", idp_metadata="string")
const samlIdpMetadataResource = new datadog.SamlIdpMetadata("samlIdpMetadataResource", {idpMetadata: "string"});
type: datadog:SamlIdpMetadata
properties:
idpMetadata: string
SamlIdpMetadata Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The SamlIdpMetadata resource accepts the following input properties:
- Idp
Metadata string - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload.
- Idp
Metadata string - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload.
- idp_
metadata string - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload.
- idp
Metadata String - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload.
- idp
Metadata string - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload.
- idp_
metadata str - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload.
- idp
Metadata String - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload.
Outputs
All input properties are implicitly available as output properties. Additionally, the SamlIdpMetadata resource produces the following output properties:
- Assertion
Consumer List<string>Services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- Entity
Id string - The service provider entity ID Datadog presents to the identity provider.
- Expires
At string - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- Id string
- The provider-assigned unique ID for this managed resource.
- Sso
Url string - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- Assertion
Consumer []stringServices - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- Entity
Id string - The service provider entity ID Datadog presents to the identity provider.
- Expires
At string - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- Id string
- The provider-assigned unique ID for this managed resource.
- Sso
Url string - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- assertion_
consumer_ list(string)services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- entity_
id string - The service provider entity ID Datadog presents to the identity provider.
- expires_
at string - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- id string
- The provider-assigned unique ID for this managed resource.
- sso_
url string - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- assertion
Consumer List<String>Services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- entity
Id String - The service provider entity ID Datadog presents to the identity provider.
- expires
At String - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- id String
- The provider-assigned unique ID for this managed resource.
- sso
Url String - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- assertion
Consumer string[]Services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- entity
Id string - The service provider entity ID Datadog presents to the identity provider.
- expires
At string - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- id string
- The provider-assigned unique ID for this managed resource.
- sso
Url string - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- assertion_
consumer_ Sequence[str]services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- entity_
id str - The service provider entity ID Datadog presents to the identity provider.
- expires_
at str - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- id str
- The provider-assigned unique ID for this managed resource.
- sso_
url str - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- assertion
Consumer List<String>Services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- entity
Id String - The service provider entity ID Datadog presents to the identity provider.
- expires
At String - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- id String
- The provider-assigned unique ID for this managed resource.
- sso
Url String - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
Look up Existing SamlIdpMetadata Resource
Get an existing SamlIdpMetadata resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SamlIdpMetadataState, opts?: CustomResourceOptions): SamlIdpMetadata@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
assertion_consumer_services: Optional[Sequence[str]] = None,
entity_id: Optional[str] = None,
expires_at: Optional[str] = None,
idp_metadata: Optional[str] = None,
sso_url: Optional[str] = None) -> SamlIdpMetadatafunc GetSamlIdpMetadata(ctx *Context, name string, id IDInput, state *SamlIdpMetadataState, opts ...ResourceOption) (*SamlIdpMetadata, error)public static SamlIdpMetadata Get(string name, Input<string> id, SamlIdpMetadataState? state, CustomResourceOptions? opts = null)public static SamlIdpMetadata get(String name, Output<String> id, SamlIdpMetadataState state, CustomResourceOptions options)resources: _: type: datadog:SamlIdpMetadata get: id: ${id}import {
to = datadog_saml_idp_metadata.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Assertion
Consumer List<string>Services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- Entity
Id string - The service provider entity ID Datadog presents to the identity provider.
- Expires
At string - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- Idp
Metadata string - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload. - Sso
Url string - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- Assertion
Consumer []stringServices - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- Entity
Id string - The service provider entity ID Datadog presents to the identity provider.
- Expires
At string - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- Idp
Metadata string - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload. - Sso
Url string - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- assertion_
consumer_ list(string)services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- entity_
id string - The service provider entity ID Datadog presents to the identity provider.
- expires_
at string - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- idp_
metadata string - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload. - sso_
url string - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- assertion
Consumer List<String>Services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- entity
Id String - The service provider entity ID Datadog presents to the identity provider.
- expires
At String - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- idp
Metadata String - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload. - sso
Url String - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- assertion
Consumer string[]Services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- entity
Id string - The service provider entity ID Datadog presents to the identity provider.
- expires
At string - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- idp
Metadata string - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload. - sso
Url string - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- assertion_
consumer_ Sequence[str]services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- entity_
id str - The service provider entity ID Datadog presents to the identity provider.
- expires_
at str - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- idp_
metadata str - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload. - sso_
url str - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
- assertion
Consumer List<String>Services - The assertion consumer service (ACS) URLs that the identity provider posts SAML responses to.
- entity
Id String - The service provider entity ID Datadog presents to the identity provider.
- expires
At String - The timestamp (RFC3339) at which the uploaded identity provider metadata expires.
- idp
Metadata String - The content of the IdP metadata XML file, for example loaded with the
file()function. A leading UTF-8 byte order mark (BOM) is stripped automatically before upload. - sso
Url String - The single sign-on URL users can visit to start a SAML login.
nullwhen the organization is identity-provider-initiated and has no subdomain.
Package Details
- Repository
- Datadog pulumi/pulumi-datadog
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
datadogTerraform Provider.
published on Tuesday, Sep 15, 2026 by Pulumi