Action Required: Customers using SSO with pinned SAML signing certificate
December 1st, 2025
Customers using SSO with SAML and a pinned/static PagerDuty SAML signing certificate must update to the new certificate before January 5, 2026 to avoid login failures. The current certificate expires January 5, 2026 and will be removed on December 29, 2025 between 6–7 PM UTC. If your IdP pulls our SAML metadata dynamically (not pinned), no action is required.
Download the End entity and intermediate CA certificate in a single file or End entity certificate . For identification, the new certificate's serial number is 0c1c94a8afa209458553f3c08bf53697 and the old certificate's serial number is031e78b577bc1f4aae7312e07a8b0afb . Learn more about Single Sign-On and SAML with PagerDuty.