Steps to configure SAML SSO for Slack

About Slack

Slack is a comprehensive productivity platform designed to enhance team collaboration and streamline workflows. It offers a flexible communication environment where users can chat and share files, and engage in live discussions.

The following steps will help you enable single sign-on (SSO) for Slack from Identity360.

Prerequisites

1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications. For more information, refer to pricing details.
2. Log in to Identity360 as an Admin or Super Admin.
3. Navigate to Applications > Application Integration > Create New Application, and select Slack from the applications displayed.
   Note: You can also find Slack from the search bar located at the top.
4. Under the General Settings tab, enter the Application Name and Description.
5. Under Choose Capabilities tab, choose SSO and click Continue.
   General settings of SSO configuration for Slack
6. Under Integration Settings, navigate to the Single Sign On tab and click Metadata Details. Copy the Login URL, Issuer URL, and Signing Certificate values, which will be used later during the configuration of Slack.
   Integration Settings of SSO configuration for Slack

Slack (service provider) configuration steps

1. Log into Slack as a workspace admin.
2. From the menu bar on the left side, navigate to Settings & permissions → Authentication.
3. Next to SAML authentication, click Configure.
   Authentication settings of SAML configuration in Slack
4. In the SAML 2.0 Endpoint (HTTP) and Identity Provider Issuer fields, enter the Login URL and Issuer URL copied from step 6 of prerequisites.
5. In the Public Certificate field, paste the Signing Certificate value copied from step 6 of prerequisites.
   SAML configuration details in Slack
6. If you want to customize the Sign In Button Label, then enter a name for the button.
7. Click Save Configuration.
   Sign-in button customization in Slack

Identity360 (identity provider) configuration steps

1. Switch to Identity360's SSO configuration page for Slack.
2. Enter the workspace name of your Slack account, which can be found on the sidebar of Slack.
3. Enter the Relay State parameter, if necessary.
   Note: Relay State is an optional parameter used with a SAML message to remember where you were or direct you to a specific page after logging in.
4. Click Save.
   Integration Settings of SSO configuration for Slack
5. To learn how to assign users to one or more applications, refer to this page.

Your users should now be able to sign in to Slack through the Identity360 portal.