Skip to content

Commit 8243b13

Browse files
ttorblettorble
authored
Merge pull request #110953 from v-nagta/pagerduty
Product Backlog Item 979403: SaaS App Tutorial: PagerDuty Update
2 parents ec6dc07 + c30e97c commit 8243b13

File tree

2 files changed

+87
-128
lines changed

2 files changed

+87
-128
lines changed

‎articles/active-directory/saas-apps/media/pagerduty-tutorial/ic778540.png

133 Bytes
Loading

‎articles/active-directory/saas-apps/pagerduty-tutorial.md

Lines changed: 87 additions & 128 deletions
Original file line numberDiff line numberDiff line change
@@ -18,115 +18,120 @@ ms.date: 03/14/2019
1818
ms.author: jeedes
1919

2020
---
21-
# Tutorial: Azure Active Directory integration with PagerDuty
2221

23-
In this tutorial, you learn how to integrate PagerDuty with Azure Active Directory (Azure AD).
24-
Integrating PagerDuty with Azure AD provides you with the following benefits:
22+
# Tutorial: Azure Active Directory single sign-on (SSO) integration with PagerDuty
2523

26-
* You can control in Azure AD who has access to PagerDuty.
27-
* You can enable your users to be automatically signed-in to PagerDuty (Single Sign-On) with their Azure AD accounts.
28-
* You can manage your accounts in one central location - the Azure portal.
24+
In this tutorial, you'll learn how to integrate PagerDuty with Azure Active Directory (Azure AD). When you integrate PagerDuty with Azure AD, you can:
2925

30-
If you want to know more details about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
31-
If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.
26+
* Control in Azure AD who has access to PagerDuty.
27+
* Enable your users to be automatically signed-in to PagerDuty with their Azure AD accounts.
28+
* Manage your accounts in one central location - the Azure portal.
29+
30+
To learn more about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/manage-apps/what-is-single-sign-on).
3231

3332
## Prerequisites
3433

35-
To configure Azure AD integration with PagerDuty, you need the following items:
34+
To get started, you need the following items:
3635

37-
* An Azure AD subscription. If you don't have an Azure AD environment, you can get one-month trial [here](https://azure.microsoft.com/pricing/free-trial/)
38-
* PagerDuty single sign-on enabled subscription
36+
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
37+
* PagerDuty single sign-on (SSO) enabled subscription.
3938

4039
## Scenario description
4140

42-
In this tutorial, you configure and test Azure AD single sign-on in a test environment.
41+
In this tutorial, you configure and test Azure AD SSO in a test environment.
4342

4443
* PagerDuty supports **SP** initiated SSO
44+
* Once you configure PagerDuty you can enforce session control, which protect exfiltration and infiltration of your organization’s sensitive data in real-time. Session control extend from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/proxy-deployment-any-app).
4545

4646
## Adding PagerDuty from the gallery
4747

4848
To configure the integration of PagerDuty into Azure AD, you need to add PagerDuty from the gallery to your list of managed SaaS apps.
4949

50-
**To add PagerDuty from the gallery, perform the following steps:**
51-
52-
1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon.
53-
54-
![The Azure Active Directory button](common/select-azuread.png)
55-
56-
2. Navigate to **Enterprise Applications** and then select the **All Applications** option.
57-
58-
![The Enterprise applications blade](common/enterprise-applications.png)
59-
60-
3. To add new application, click **New application** button on the top of dialog.
61-
62-
![The New application button](common/add-new-app.png)
50+
1. Sign in to the [Azure portal](https://portal.azure.com) using either a work or school account, or a personal Microsoft account.
51+
1. On the left navigation pane, select the **Azure Active Directory** service.
52+
1. Navigate to **Enterprise Applications** and then select **All Applications**.
53+
1. To add new application, select **New application**.
54+
1. In the **Add from the gallery** section, type **PagerDuty** in the search box.
55+
1. Select **PagerDuty** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
6356

64-
4. In the search box, type **PagerDuty**, select **PagerDuty** from result panel then click **Add** button to add the application.
57+
## Configure and test Azure AD single sign-on for PagerDuty
6558

66-
![PagerDuty in the results list](common/search-new-app.png)
59+
Configure and test Azure AD SSO with PagerDuty using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in PagerDuty.
6760

68-
## Configure and test Azure AD single sign-on
61+
To configure and test Azure AD SSO with PagerDuty, complete the following building blocks:
6962

70-
In this section, you configure and test Azure AD single sign-on with PagerDuty based on a test user called **Britta Simon**.
71-
For single sign-on to work, a link relationship between an Azure AD user and the related user in PagerDuty needs to be established.
63+
1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
64+
1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
65+
1. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
66+
1. **[Configure PagerDuty SSO](#configure-pagerduty-sso)** - to configure the single sign-on settings on application side.
67+
1. **[Create PagerDuty test user](#create-pagerduty-test-user)** - to have a counterpart of B.Simon in PagerDuty that is linked to the Azure AD representation of user.
68+
1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
7269

73-
To configure and test Azure AD single sign-on with PagerDuty, you need to complete the following building blocks:
70+
## Configure Azure AD SSO
7471

75-
1. **[Configure Azure AD Single Sign-On](#configure-azure-ad-single-sign-on)** - to enable your users to use this feature.
76-
2. **[Configure PagerDuty Single Sign-On](#configure-pagerduty-single-sign-on)** - to configure the Single Sign-On settings on application side.
77-
3. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with Britta Simon.
78-
4. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable Britta Simon to use Azure AD single sign-on.
79-
5. **[Create PagerDuty test user](#create-pagerduty-test-user)** - to have a counterpart of Britta Simon in PagerDuty that is linked to the Azure AD representation of user.
80-
6. **[Test single sign-on](#test-single-sign-on)** - to verify whether the configuration works.
72+
Follow these steps to enable Azure AD SSO in the Azure portal.
8173

82-
### Configure Azure AD single sign-on
74+
1. In the [Azure portal](https://portal.azure.com/), on the **PagerDuty** application integration page, find the **Manage** section and select **single sign-on**.
75+
1. On the **Select a single sign-on method** page, select **SAML**.
76+
1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
8377

84-
In this section, you enable Azure AD single sign-on in the Azure portal.
78+
![Edit Basic SAML Configuration](common/edit-urls.png)
8579

86-
To configure Azure AD single sign-on with PagerDuty, perform the following steps:
80+
1. On the **Basic SAML Configuration** section, perform the following steps:
8781

88-
1. In the [Azure portal](https://portal.azure.com/), on the **PagerDuty** application integration page, select **Single sign-on**.
82+
a. In the **Sign on URL** text box, type a URL using the following pattern:
83+
`https://<tenant-name>.pagerduty.com`
8984

90-
![Configure single sign-on link](common/select-sso.png)
85+
b. In the **Identifier (Entity ID)** text box, type a URL using the following pattern:
86+
`https://<tenant-name>.pagerduty.com`
9187

92-
2. On the **Select a Single sign-on method** dialog, select **SAML/WS-Fed** mode to enable single sign-on.
88+
c. In the **Reply URL** text box, type a URL using the following pattern:
89+
`https://<tenant-name>.pagerduty.com`
9390

94-
![Single sign-on select mode](common/select-saml-option.png)
91+
> [!NOTE]
92+
> These values are not real. Update these values with the actual Sign on URL, Identifier and Reply URL. Contact [PagerDuty Client support team](https://www.pagerduty.com/support/) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
9593

96-
3. On the **Set up Single Sign-On with SAML** page, click **Edit** icon to open **Basic SAML Configuration** dialog.
94+
1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Certificate (Base64)** and select **Download** to download the certificate and save it on your computer.
9795

98-
![Edit Basic SAML Configuration](common/edit-urls.png)
96+
![The Certificate download link](common/certificatebase64.png)
9997

100-
4. On the **Basic SAML Configuration** section, perform the following steps:
98+
1. On the **Set up PagerDuty** section, copy the appropriate URL(s) based on your requirement.
10199

102-
![PagerDuty Domain and URLs single sign-on information](common/sp-identifier.png)
100+
![Copy configuration URLs](common/copy-configuration-urls.png)
103101

104-
a. In the **Sign on URL** text box, type a URL using the following pattern:
105-
`https://<tenant-name>.pagerduty.com`
102+
### Create an Azure AD test user
106103

107-
b. In the **Identifier (Entity ID)** text box, type a URL using the following pattern:
108-
`https://<tenant-name>.pagerduty.com`
104+
In this section, you'll create a test user in the Azure portal called B.Simon.
109105

110-
> [!NOTE]
111-
> These values are not real. Update these values with the actual Sign on URL and Identifier. Contact [PagerDuty Client support team](https://www.pagerduty.com/support/) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
106+
1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
107+
1. Select **New user** at the top of the screen.
108+
1. In the **User** properties, follow these steps:
109+
1. In the **Name** field, enter `B.Simon`.
110+
1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
111+
1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
112+
1. Click **Create**.
112113

113-
5. On the **Set up Single Sign-On with SAML** page, in the **SAML Signing Certificate** section, click **Download** to download the **Certificate (Base64)** from the given options as per your requirement and save it on your computer.
114+
### Assign the Azure AD test user
114115

115-
![The Certificate download link](common/certificatebase64.png)
116+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to PagerDuty.
116117

117-
6. On the **Set up PagerDuty** section, copy the appropriate URL(s) as per your requirement.
118+
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
119+
1. In the applications list, select **PagerDuty**.
120+
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
118121

119-
![Copy configuration URLs](common/copy-configuration-urls.png)
122+
![The "Users and groups" link](common/users-groups-blade.png)
120123

121-
a. Login URL
124+
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
122125

123-
b. Azure AD Identifier
126+
![The Add User link](common/add-assign-user.png)
124127

125-
c. Logout URL
128+
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
129+
1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
130+
1. In the **Add Assignment** dialog, click the **Assign** button.
126131

127-
### Configure PagerDuty Single Sign-On
132+
## Configure PagerDuty SSO
128133

129-
1. In a different web browser window, log into your Pagerduty company site as an administrator.
134+
1. In a different web browser window, sign into your Pagerduty company site as an administrator.
130135

131136
2. In the menu on the top, click **Account Settings**.
132137

@@ -152,68 +157,16 @@ To configure Azure AD single sign-on with PagerDuty, perform the following steps
152157

153158
f. Click **Save Changes**.
154159

155-
### Create an Azure AD test user
156-
157-
The objective of this section is to create a test user in the Azure portal called Britta Simon.
158-
159-
1. In the Azure portal, in the left pane, select **Azure Active Directory**, select **Users**, and then select **All users**.
160-
161-
![The "Users and groups" and "All users" links](common/users.png)
162-
163-
2. Select **New user** at the top of the screen.
164-
165-
![New user Button](common/new-user.png)
166-
167-
3. In the User properties, perform the following steps.
168-
169-
![The User dialog box](common/user-properties.png)
170-
171-
a. In the **Name** field enter **BrittaSimon**.
172-
173-
b. In the **User name** field type **[email protected]**
174-
For example, [email protected]
175-
176-
c. Select **Show password** check box, and then write down the value that's displayed in the Password box.
177-
178-
d. Click **Create**.
179-
180-
### Assign the Azure AD test user
181-
182-
In this section, you enable Britta Simon to use Azure single sign-on by granting access to PagerDuty.
183-
184-
1. In the Azure portal, select **Enterprise Applications**, select **All applications**, then select **PagerDuty**.
185-
186-
![Enterprise applications blade](common/enterprise-applications.png)
187-
188-
2. In the applications list, select **PagerDuty**.
189-
190-
![The PagerDuty link in the Applications list](common/all-applications.png)
191-
192-
3. In the menu on the left, select **Users and groups**.
193-
194-
![The "Users and groups" link](common/users-groups-blade.png)
195-
196-
4. Click the **Add user** button, then select **Users and groups** in the **Add Assignment** dialog.
197-
198-
![The Add Assignment pane](common/add-assign-user.png)
199-
200-
5. In the **Users and groups** dialog select **Britta Simon** in the Users list, then click the **Select** button at the bottom of the screen.
201-
202-
6. If you are expecting any role value in the SAML assertion then in the **Select Role** dialog select the appropriate role for the user from the list, then click the **Select** button at the bottom of the screen.
203-
204-
7. In the **Add Assignment** dialog click the **Assign** button.
205-
206160
### Create PagerDuty test user
207161

208-
To enable Azure AD users to log in to PagerDuty, they must be provisioned into PagerDuty.
209-
In the case of PagerDuty, provisioning is a manual task.
162+
To enable Azure AD users to sign into PagerDuty, they must be provisioned into PagerDuty. In the case of PagerDuty, provisioning is a manual task.
210163

211-
>[!NOTE]
212-
>You can use any other Pagerduty user account creation tools or APIs provided by Pagerduty to provision Azure Active Directory user accounts.
164+
> [!NOTE]
165+
> You can use any other Pagerduty user account creation tools or APIs provided by Pagerduty to provision Azure Active Directory user accounts.
213166
214167
**To provision a user account, perform the following steps:**
215168

216-
1. Log in to your **Pagerduty** tenant.
169+
1. Sign into your **Pagerduty** tenant.
217170

218171
2. In the menu on the top, click **Users**.
219172

@@ -225,26 +178,32 @@ In the case of PagerDuty, provisioning is a manual task.
225178

226179
![Invite your team](./media/pagerduty-tutorial/ic778540.png "Invite your team")
227180

228-
a. Type the **First and Last Name** of user like **Britta Simon**.
181+
a. Type the **First and Last Name** of user like **B.Simon**.
229182

230-
b. Enter **Email** address of user like **brittasimon\@contoso.com**.
183+
b. Enter **Email** address of user like **b.simon\@contoso.com**.
231184

232185
c. Click **Add**, and then click **Send Invites**.
233186

234-
>[!NOTE]
235-
>All added users will receive an invite to create a PagerDuty account.
187+
> [!NOTE]
188+
> All added users will receive an invite to create a PagerDuty account.
236189
237-
### Test single sign-on
190+
## Test SSO
238191

239192
In this section, you test your Azure AD single sign-on configuration using the Access Panel.
240193

241194
When you click the PagerDuty tile in the Access Panel, you should be automatically signed in to the PagerDuty for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://docs.microsoft.com/azure/active-directory/active-directory-saas-access-panel-introduction).
242195

243-
## Additional Resources
196+
## Additional resources
197+
198+
- [ List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory ](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
199+
200+
- [What is application access and single sign-on with Azure Active Directory? ](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
201+
202+
- [What is conditional access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
244203

245-
- [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
204+
- [Try PagerDuty with Azure AD](https://aad.portal.azure.com/)
246205

247-
- [What is application access and single sign-on with Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
206+
- [What is session control in Microsoft Cloud App Security?](https://docs.microsoft.com/cloud-app-security/proxy-intro-aad)
248207

249-
- [What is Conditional Access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
208+
- [How to protect PagerDuty with advanced visibility and controls](https://docs.microsoft.com/cloud-app-security/proxy-intro-aad)
250209

0 commit comments

Comments
 (0)