---
title: Creating a provisioning connection
description: To allow PingFederate to manage users in Slack, create a service provider (SP) connection.
component: slack
page_id: slack:setup:pf_slack_connector_creating_a_provisioning_connection
canonical_url: https://docs.pingidentity.com/integrations/slack/setup/pf_slack_connector_creating_a_provisioning_connection.html
revdate: July 8, 2024
section_ids:
  steps: Steps
---

# Creating a provisioning connection

To allow PingFederate to manage users in Slack, create a service provider (SP) connection.

## Steps

1. In the PingFederate administrator console, create a new SP connection:

   1. For PingFederate 10.1 or later: go to **Applications > Integration > SP Connections**. Click **Create Connection**.

   2. For PingFederate 10.0 or earlier: go to **Identity Provider > SP Connections**. Click **Create Connection**.

2. Configure the basic connection details with the Slack quick connection template.

   1. On the **Connection Template** tab, select **Use a template for this connection**.

   2. From the **Connection Template** list, select **Slack Provisioner**.

   3. On the **Metadata File** row, select the saml-metadata.xml file that you saved in [Preparing your SAML metadata file](pf_slack_connector_preparing_your_saml_metadata_file.html). Click **Next**.

   4. On the **Connection Type** tab select only **Outbound Provisioning**. Click **Next**.

   5. On the **Connection Options** tab, click **Next**.

   6. On the **General Info** tab, in the **Connection Name** field, enter a name of your choosing. Click **Next**.

3. On the **Outbound Provisioning** tab, configure the provisioning target and channel as shown in [Configuring outbound provisioning](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_spconnectionconfigtasklet_saasprovisioningstate.html) in the PingFederate documentation.

   1. Click **Configure Provisioning**.

   2. On the **Target** tab, enter the **OAuth 2 Access Token** that you noted in [Getting a Slack API access token](pf_slack_connector_getting_a_slack_api_access_token.html).

      |   |                                                                                  |
      | - | -------------------------------------------------------------------------------- |
      |   | PingFederate verifies the token when you activate the channel and SP connection. |

   3. **Optional:** If your environment requires you to use the `userName` attribute to synchronize users between your datastore and Slack, select it from the **Unique User Identifier** list. Otherwise, use `primaryEmail`.

      |   |                                                                                                                                                                              |
      | - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      |   | You cannot change this selection without deleting the connection. See [Known issues and limitations](../release_notes/pf_slack_connector_known_issues_and_limitations.html). |

   4. Under **Provisioning Options**, customize the provisioning connector actions as shown in [Provisioning options reference](pf_slack_connector_provisioning_options_reference.html). Click **Next**.

   5. On the **Manage Channels** tab, create a channel as shown in [Managing channels](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_saasmanagementtasklet_saasmanagementstate.html) in the PingFederate documentation. Click **Done**.

      |   |                                                                                                                                                                                  |
      | - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      |   | For more information about the attributes available in your channel configuration, see [Supported attributes reference](pf_slack_connector_supported_attributes_reference.html). |

   6. On the **Outbound Provisioning** tab, click **Next**.

4. On the **Activation and Summary** tab, above the **Summary** section, click the toggle to turn on the connection. Click **Save**.