Make sure that you have:

We recommend that you review the provisioning information in the Slack documentation. See Manage members with SCIM Provisioning.

  1. Go to Connections > Provisioning.
  2. Click the + icon and then click New connection.
  3. For Identity Store, click the Select button.
  4. Under Slack, click Select and then click Next.
  5. Enter a name and description for this provisioning connection.
    The connection name will appear in the list when you've completed and saved the connection.
  6. Click Next.
  7. On the Configure authentication screen, enter the following:
    • OAuth2 Access Token. The access token from Slack for the connected application. You can use the Ping Identity OAuth Configuration Service (OCS) to get the token. For more information, see Getting a Slack API access token.
  8. Click Test connection to verify that PingOne can establish a connection to Slack. If there are any issues with the connection, a Test connection failed message will appear. Click Continue to resume the setup with an invalid connection. You will not be able to use the connection for provisioning until you have established a valid connection to Slack. Click Cancel to modify the settings and try again.
  9. On the Configure preferences screen, enter the following:
    • Unique user identifier. Determines how to identify a unique user. Select primaryEmail or userName.
    • Allow users to be created. Determines whether to create a user in the Slack user directory when the user is created in the PingOne identity store.
    • Allow users to be updated. Determines whether to update user attributes in the Slack user directory when the user is updated in the PingOne identity store.
    • Allow users to be deprovisioned. Determines whether to deprovision a user in the Slack user directory when the user is deprovisioned in the PingOne identity store.
    • Remove action. Determines the action to take when removing a user from the Slack user directory.
      • Disable. When a user is deprovisioned from the PingOne identity store, PingOne disables the user in the external identity store.
    • Deprovision on rule deletion. Determines whether to deprovision users that were provisioned using this rule if the rule is deleted.
  10. Click Finish.
Creating a rule