Skip to content
Common Fate
Docs Granted

PagerDuty

PagerDuty and Common Fate

Common Fate integrates with PagerDuty to contextually approve access based on a user’s on-call status.

Prerequisites

To set up PagerDuty in your Common Fate deployment you will need to register an app within your PagerDuty tenancy.

  1. Log into your PagerDuty account with an admin user. In the nav bar you will see an Integrations tab. Hover this and select “App Registrations”.

    PagerDuty Integrations Tab

  2. You will be taken to the App Registrations page, next click on the “New App” button in the top left.

    App Registrations Page

  3. Here you will fill in some information about the app registration. The name can be called Common Fate and give any description you want. As an example: Common Fate allows assigning just in time access to users in on-call schedules with PagerDuty.

  • Make sure you select OAuth 2.0 for the functionality. Click next. App Registration Form

  1. Under Redirect Url’s make sure to add <your app URL>/api/v1/oauth2/callback/pagerduty

  2. Under Authorization select Scoped OAuth. Under Permission Scope select User.Read Access Oncalls.Read Access Schedules.Read Access Teams.Read Access Click Register App

A modal will pop up with some client credentials. We need to save the Client ID and Client Secret to AWS SSM Parameter Store for it to be used in the Common Fate deployment.

You can use the AWS CLI to create a secret in the region you are deploying to, you must use the following path "/<namespace>/<stage>/<secret name>"

Terminal window
aws ssm put-parameter \
    --name "/common-fate/prod/pagerduty-client-secret" \
    --value "mySecretValue" \
    --type "SecureString"

Retrieve the ARN

Terminal window
aws ssm get-parameter \
    --name "/common-fate/prod/pagerduty-client-secret" --query Parameter.ARN

Create the resource in Common Fate Terraform Config

Add the following resource into your config using the commonfate Terraform provider.

resource "commonfate_pagerduty_integration" "demo" {
  name                      = "PagerDuty"
  client_id                 = <PagerDuty client id>
  client_secret_secret_path = <PagerDuty client secret parameter store ARN>
}

Apply the new resource with terraform apply

Requirements

To integrate with PagerDuty, Common Fate will initiate an OAuth 2.0 connection with your PagerDuty account. This connection will only use read-only access to all schedules and which users are currently on schedule.

Integration Walkthrough

In Common Fate

  1. Sign in to your Common Fate deployment and from the home screen, navigate to Settings.

  2. On the Access Controls page, scroll down to the Integrations section. Locate the PagerDuty connection and click on Connect. This initiates the OAuth flow to integrate PagerDuty with your Common Fate account.

  3. Enter your login details to sign in with PagerDuty, and submit consent.

  4. After logging in, you will be redirected back to the Common Fate Access Controls page, where you will notice that the PagerDuty integration is now online.

Support

If you need assistance with this integration, please contact support@commonfate.io, or join our Slack community here, we’re happy to help!