How to Configure SAML 2.0 for PagerDuty

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/PagerDuty SAML integration currently supports the following features:

• SP-initiated SSO
• IdP-initiated SSO
• JIT (Just In Time) Provisioning

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Sign in to your PagerDuty account as an administrator.

2. Navigate to Configuration > Account Settings:

   

3. Click on Single Sign-on, then follow the steps below:

   • Select SAML.

   • X.509 Certificate: Copy and paste the following:

     Sign into the Okta Admin app to generate this variable.

   • Login URL: Copy and paste the following:

     Sign into the Okta Admin app to generate this variable.

   • Logout URL (optional): Copy and paste the following:

     Sign into the Okta Admin app to generate this variable.

   • If you want to enable JIT, check Auto-provision users on first login.

   • Click Save Changes:

   

   

4. Done!

---

Notes

• Make sure that you entered the correct value in the Organization Subdomain field under the General application tab in Okta. Using the wrong value will prevent you from authenticating via SAML to PagerDuty.

• The following SAML attributes are supported:

  Name	Value
  FirstName	user.firstName
  LastName	user.lastName
  Email	user.userName

SP-initiated SSO

1. Go to https://[your-pagerduty-subdomain].pagerduty.com/sign_in.

2. Click Sign In With Your Identity Provider.