PagerDuty

PagerDuty Configuration

Navigate to SSO Settings

1. Log in to PagerDuty at https://{subdomain}.pagerduty.com
2. Click your User Icon in the top right corner
3. Select Account Settings
4. Click the Single Sign-On tab

Download PagerDuty Metadata

1. Download the PagerDuty SAML metadata file from:

   https://<subdomain>.pagerduty.com/sso/saml/metadata

2. Save this XML file - you will upload it to SplitSecure later

Configure SAML Authentication

1. Under Login Authentication, select SAML

2. Enter the following information from SplitSecure (found at Secure Accounts → SAML2 Identity Providers → [Your IdP] → Details):

   Field	Value
   X.509 Certificate	Paste the certificate (.pem) content from SplitSecure (including -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----)
   Login URL	Under SSO URL (POST)
   Logout URL (optional)	(None for now)

Configure Authentication Options

Configure the following options based on your security requirements:

Configure User Provisioning

Choose one of the following options:

Option A: Auto-Provision Users on First Login (Recommended)

1. Check Auto-provision users on first login
2. Users will be automatically created in PagerDuty when they first authenticate via SSO
3. Ensure attribute mappings are configured in SplitSecure

Option B: Redirect Non-Provisioned Users

1. Check Redirect non-provisioned users
2. Enter a Destination Link (e.g., internal wiki with provisioning instructions)
3. Users without PagerDuty accounts will be redirected to this URL

Option C: Pre-Provision Users

1. Leave both options unchecked
2. Manually create users in PagerDuty before they can log in via SSO:
   • Navigate to People → Users → Add Users

Save Configuration

Click Save Changes at the bottom of the page.

SplitSecure Configuration

Create a Secure Account

1. In SplitSecure, navigate to Secure Accounts → Create Account
2. Select PagerDuty
3. Enter a name for the account (e.g., PagerDuty Secure Account)
4. Select your Identity Provider
5. Upload the PagerDuty metadata XML file downloaded in Part 1
6. Click Create Account

User Provisioning Settings

SplitSecure supports user provisioning for PagerDuty. When initiating an authentication flow (either IdP-initiated or SP-initiated) with Create User enabled, the following fields must be filled:

Test Authentication

SP-Initiated SSO (User starts at PagerDuty)

1. Navigate to https://{subdomain}.pagerduty.com
2. Click Sign in with SSO or your company’s SSO option
3. You will be redirected to SplitSecure
4. Authenticate with your SplitSecure credentials
5. You should be redirected back to PagerDuty, logged in

IdP-Initiated SSO (User starts at SplitSecure)

1. Navigate to SplitSecure
2. Go to Secure Accounts
3. Click on your PagerDuty Secure Account
4. Click Authenticate or Launch
5. You should be logged directly into PagerDuty

Post-Configuration Steps

Disable Password Login (After Testing)

Once SSO is working correctly:

1. Navigate to User Icon → Account Settings → Single Sign-On
2. Uncheck Allow username/password login
3. Click Save Changes

User Offboarding

When an employee leaves:

1. Remove their access in SplitSecure
2. In PagerDuty:
   • Remove the user from schedules and escalation policies
   • Delete or deactivate their user account

Troubleshooting

External Resources

• Single Sign-On Documentation SSO setup and configuration
• Integration Directory Available integrations
• User Roles Role definitions and permissions
• Advanced Permissions Granular access control
• Offboarding User removal procedures