Slack Onboarding

This guide explains how to onboard Slack into SailPoint Entro. Follow Slack Private App steps below, or skip to Enterprise Grid Onboarding if your organization uses Slack Enterprise Grid.

---

Part 1 - Create Your Slack App from a Manifest

1. Create a new app

   Go to https://api.slack.com/apps and click Create New App.

2. Choose manifest

   In the dialog, choose From an App Manifest.

3. Select workspace

   Select the target workspace and click Next.

4. Paste the manifest

   In the YAML tab, paste the following manifest:

   {
       "display_information": {
           "name": "Entro Security",
           "description": "Entro, Secret security. Reclaim control over your secrets",
           "background_color": "#0f0635"
       },
       "features": {
           "bot_user": {
               "display_name": "Entro Security",
               "always_online": false
           }
       },
       "oauth_config": {
           "scopes": {
               "user": [
                   "channels:history",
                   "channels:read",
                   "channels:write",
                   "chat:write",
                   "groups:history",
                   "groups:read",
                   "im:history",
                   "im:write",
                   "team:read",
                   "users:read",
                   "groups:write",
                   "search:read",
                   "files:read"
               ],
               "bot": [
                   "app_mentions:read",
                   "channels:history",
                   "channels:join",
                   "channels:manage",
                   "channels:read",
                   "chat:write",
                   "chat:write.customize",
                   "chat:write.public",
                   "conversations.connect:manage",
                   "conversations.connect:read",
                   "conversations.connect:write",
                   "files:read",
                   "groups:history",
                   "groups:read",
                   "groups:write",
                   "im:history",
                   "im:read",
                   "im:write",
                   "incoming-webhook",
                   "metadata.message:read",
                   "mpim:history",
                   "team:read",
                   "usergroups:read",
                   "usergroups:write",
                   "users.profile:read",
                   "users:read",
                   "users:read.email",
                   "users:write"
               ]
           }
       },
       "settings": {
           "event_subscriptions": {
               "bot_events": [
                   "channel_created",
                   "file_created",
                   "file_shared",
                   "message.channels",
                   "message.groups"
               ]
           },
           "interactivity": { "is_enabled": true },
           "org_deploy_enabled": false,
           "socket_mode_enabled": true,
           "token_rotation_enabled": false
       }
   }
   

5. Review and create

   Click Next, review the settings, then click Create.

---

Part 2 - Generate and Collect API Tokens

1. Enable Socket Mode and create App-Level Token

   Enable Socket Mode → Basic Information → App-Level Tokens.

   • Create a token named socket-mode-token with scope connections:write.
   • Copy the generated xapp-... token.

2. Install app and copy OAuth tokens

   Go to Features → OAuth & Permissions.

   • Click Install to Workspace and authorize.
   • Copy both tokens:
     • User OAuth Token (xoxp-...)
     • Bot User OAuth Token (xoxb-...)

---

Part 3 - Configure Slack in SailPoint Entro

1. Open integration settings

   In SailPoint Entro, go to Management → Accounts & Integrations → Add New Account → Slack → Slack Private App.

2. Fill in the fields

   Field	Description
   User OAuth Token	Paste xoxp‑...
   Bot User OAuth Token	Paste xoxb‑...
   App‑Level Token	Paste xapp‑...
   Company Nickname	Choose a display name
   Worker Group (Connector)	Select the connector

3. Save configuration

   Click Save Configuration to activate the integration.

---

How It Works

• Uses Socket Mode for a direct, secure connection — no public webhook.

• The bot joins all public channels automatically.

• To add it to private channels, run /invite @YourBotName.

---

Part 4 - Slack Enterprise Grid Onboarding (Optional)

Use this method if your organization uses Slack Enterprise Grid.

1. Confirm Org Owner access

   You must be an Org Owner in Slack.

2. Start consent flow

   In SailPoint Entro, choose Slack Enterprise Grid App → click Consent OAuth.

3. Handle Discovery API error if needed

   If you see team_not_authorized, contact Slack to enable the Discovery API.

4. Grant permissions

   Grant permissions by clicking Allow.

5. Choose worker group and workspace

   Choose your Worker Group and Workspace, then click Confirm.

   • If no Worker Group exists, contact support@entro.security.

   SailPoint Entro will now scan messages, users, and channels within the authorized workspace scope.