Page created: 31 Mar 2021
|
Page updated: 8 Feb 2022
| 2 min read
Slack Other Documents Integrations Language English Integration Content Type Product documentation Audience Administrator
If you use Slack Enterprise Grid, configure SSO as follows.
- Sign on to Slack Enterprise Grid as a Workspace Owner.
-
Go to Manage Organization > Security > SSO Settings > Configure SSO.
-
In the SAML 2.0 Endpoint (HTTP) field, enter
https://pf_host:pf_port/idp/SSO.saml2.
For example: https://pf.example.com:9031/idp/SSO.saml2
- In the Identity Provider Issuer field, enter the SAML 2.0 Entity ID that you created in Enabling provisioning and single sign-on in PingFederate.
- In the Service Provider Issuer URL, use the default value of https://slack.com.
-
In the Public (X.509) Certificate field, enter the
contents of your PingFederate signing certificate.
To get your certificate, see Exporting a certificate in Managing digital signing certificates and decryption keys in the PingFederate documentation.
-
Enable authentication request signing.
- Select the Sign the AuthnRequest check box.
- Copy the certificate text.
- Create a new .crt file on your computer and paste the certificate text.
-
In PingFederate, import the .crt
file as a trusted certificate authority.
For help, see Managing trusted certificate authorities in the PingFederate documentation.
-
Clear the Sign the Assertion check box.
- Click Test Configuration.
- Save your configuration.
-
Sign out of Slack, and then sign back on using
SSO.
This saves your configuration and sends an email to team members inviting them set up SSO with their Slack accounts.