Centrify Integration Guide

Centrify improves end-user productivity and secures access to cloud, mobile, and on-premises apps via single sign-on, user provisioning, and multi-factor authentication.

 

Note

You must be the Account Owner of your PagerDuty account in order to make these changes. Additionally, SSO capabilities within PagerDuty are only available on our Standard and Enterprise plans. Please contact our sales team if you are interested in upgrading your plan.

 

In Centrify

    1. Click on Apps.
    2. Click on Add Web Apps
    3. A dialog will appear, search for PagerDuty, and click on Add button for the PagerDuty SAML app. centrify_2_
    4. Click Yes to confirm you want to add the application.
    5. Click Close to exit the Apps catalog.
    6. You will be brought to the Settings page of your Application. Enter in your PagerDuty subdomain and click Save.
    7. Click Settings > Authentication on the left menu. In the submenu, click on Security Settings. Under API Security, click Add. 
    8. Enter in your PagerDuty subdomain followed by .pagerduty.com (e.g. test-subdomain.pagerduty.com) and click Save.
    9. Click Apps on the left menu and then Trust on the submenu. Choose the Manual Configuration Option. Then click Signing Certificate to expand this section, and click Download to save this file on your computer. You will need this certificate in PagerDuty so make sure to save it to a place you can find.
    10. Note that the Login URL and Logout URLs are listed below this certificate; you will also need to copy these into PagerDuty in the next step. Open up a separate tab in your browser to access your PagerDuty account. 

In PagerDuty

  1. Login as the Account Owner.
  2. Navigate to Configuration > Account Settings.
  3. At the top right-hand corner of the page, click on Single Sign-on.
  4. Select SAML to enable SAML SSO.
  5. Open the certificate you downloaded earlier in a text editor; it should look similar to the screenshot below. Copy the full contents of this certificate and paste it into the X.509 Certificate field in PagerDuty.
  6. Copy the Login URL from Step 10 in the Centrify setup above and paste it in the Login URL field on the PagerDuty SSO configuration page.
  7. Copy the Logout URL from Step 10 in the Centrify setup above and paste it in the Logout URL (Optional) field on the PagerDuty SSO configuration page.
  8. You can select the option to Allow username/password login. It is recommended to keep this option on until you have confirmed that your users can login successfully with your SSO setup.
  9. You can also select the option to 
  10. Click Save Changes to complete the integration. centrify_7_

FAQ

Why don’t I see the Single Sign-on option when I go to Account Settings?

You must be the Account Owner of your PagerDuty account in order to make these changes. Additionally, SSO capabilities within PagerDuty are only available on our Standard and Enterprise plans. Please contact our sales team if you are interested in upgrading your plan.