Slack Private App Onboarding

Follow the Slack Private App steps below if your organization uses standard Slack workspaces. Using a manifest is the fastest way to create your Slack app, as it pre-configures all the necessary settings, scopes, and event subscriptions automatically.

Configuration Steps

Part 1: Create Slack Private App

1. Create a new app

   1. As an admin, sign in to the Slack settings console.

   2. Go to https://api.slack.com/apps and select Create New App.

   3. In the dialog, choose From a Manifest.

      

   4. Pick the target workspace and select Next.

      

2. Paste the manifest

   Select the YAML tab and paste the following manifest:

   {
       "display_information": {
           "name": "Entro Security",
           "description": "Entro, Secret security. Reclaim control over your secrets",
           "background_color": "#0f0635"
       },
       "features": {
           "bot_user": {
               "display_name": "Entro Security",
               "always_online": false
           }
       },
       "oauth_config": {
           "scopes": {
               "user": [
                   "channels:history",
                   "channels:read",
                   "channels:write",
                   "chat:write",
                   "groups:history",
                   "groups:read",
                   "im:history",
                   "im:write",
                   "team:read",
                   "users:read",
                   "groups:write",
                   "search:read",
                   "files:read"
               ],
               "bot": [
                   "app_mentions:read",
                   "channels:history",
                   "channels:join",
                   "channels:manage",
                   "channels:read",
                   "chat:write",
                   "chat:write.customize",
                   "chat:write.public",
                   "conversations.connect:manage",
                   "conversations.connect:read",
                   "conversations.connect:write",
                   "files:read",
                   "groups:history",
                   "groups:read",
                   "groups:write",
                   "im:history",
                   "im:read",
                   "im:write",
                   "incoming-webhook",
                   "metadata.message:read",
                   "mpim:history",
                   "team:read",
                   "usergroups:read",
                   "usergroups:write",
                   "users.profile:read",
                   "users:read",
                   "users:read.email",
                   "users:write"
               ]
           }
       },
       "settings": {
           "event_subscriptions": {
               "bot_events": [
                   "channel_created",
                   "file_created",
                   "file_shared",
                   "message.channels",
                   "message.groups"
               ]
           },
           "interactivity": { "is_enabled": true },
           "org_deploy_enabled": false,
           "socket_mode_enabled": true,
           "token_rotation_enabled": false
       }
   }
   

   

3. Review and create

   1. Select Next, review the settings, then select Create.

   2. Under Basic Information > Display Information, upload Entro icon 512x512.png, to be shown in Slack interactions with the app.

      

Part 2: Generate and Collect API Tokens

With the app created, you will need to generate and collect three unique tokens required for the integration to connect to your workspace.

1. Enable Socket Mode and get the App-Level Token

   1. Go to Basic Information > App-Level Tokens.

   2. Select Generate Token and Scopes.

      

   3. Create a token named socket-mode-token with scope connections:write.

      

   4. Copy the generated xapp-... token immediately and store it securely.

2. Install the app and copy OAuth tokens

   1. Go to Features > OAuth & Permissions.

   2. Under OAuth Tokens, select Install to [Workspace Name].

      

   3. Follow the prompts to authorize the application for your workspace. Choose a channel to be used for webhooks sent by SailPoint Entro.

   4. After authorization, you will be sent back to the OAuth & Permissions page. Copy and save the following two tokens:

      • User OAuth Token (starts with xoxp-)

      • Bot User OAuth Token (starts with xoxb-)

Part 3: Connect Slack to SailPoint Entro

1. Add a new integration

   1. In SailPoint Entro, go to Management > Accounts & Integrations > Add New Account > Slack.

   2. Select Slack Private App.

   3. Complete the connection form using the following details:

      • Environment - Add a name for this account.

      • Company Nickname - Choose a display name to be used in the UI.

      • User OAuth Token - Paste the xoxp-... token.

      • Bot User OAuth Token - Paste the xoxb-... token.

      • App-Level Token - Paste the xapp-... token.

      • Worker Group (Connector) - Select the connector to be used for this integration.

2. Save the configuration

   Select Save Configuration to activate the integration.

How It Works

• Uses Socket Mode for a direct, secure connection - no public webhook.

• The bot joins all public channels automatically.

• To add it to private channels, run /invite @YourBotName.