Skip to main content

Slack SAML integration

Multi-Factor Authentication (MFA) is an extra layer of security used when logging into websites or apps. Individuals are authenticated through more than one required security and validation procedure that only they know or have access to.

Security Assertion Markup Language (SAML) is a protocol for authenticating to web applications. SAML allows federated apps and organizations to communicate and trust one another’s users.

Arculix integrates with Slack via its SAML solution and provides a single sign-on (SSO) MFA to ensure the convenience of cloud SSO without its potential security risks. Multi-Factor Authentication (MFA) is an extra layer of security used when logging into websites or apps. Individuals are authenticated through more than one required security and validation procedure that only you know or have access to. SAML-based SSO gives members access to Slack through an Arculix Identity Provider (IdP).

Watch a video about this integration with Arculix in under 5 minutes.

Prerequisites

  • Configured Arculix instance and user account with administrative privileges for Arculix.

  • Configured Arculix LDAP Agent.

    For more information, see the Arculix LDAP Agent deployment guide.

  • User account with administrative privileges for the Slack portal.

Arculix SAML configuration as an Identity Provider (IdP)

In this section, you'll add an application for Slack and set the SAML configuration settings. This will be the Identity Provider (IdP) side of the configuration.

  1. Log in to Arculix with an administrative account and go to Applications.

  2. Click Create New Application.

    Create new application

  3. In the New Application form, on the General tab, set the following configurations:

    Name

    Set the name of the application. This is the name to display for push notifications, in the Admin panel, Application portal, and audit logs.

    For example, Slack.

    Type

    Set to SAML Service Provider.

    Out of Band Methods

    Select the allowed methods end users can choose to approve MFA requests.

    For example, Arculix Mobile app (push notifications), SMS, or Security Key.

    Message for MFA Requests

    Optional. Type a message displayed to end users when sending an MFA request via push notification, SMS, or email.

    arculix_new_app_slack.png

  4. Select the SAML Service Provider Configuration tab, and set the following configurations:

    Issuer or Entity ID 

    Enter the Issuer/EntityID of your Slack instance.

    For example, https://slack.com.

    Log in URL 

    The URL used to login to your Slack instance.

    For example, https://yourdomain.slack.com.

    NameID Format 

    Set to Persistent.

    Name Identifier 

    Set to Email.

    ACS URL 

    Enter the URL on the service provider to which the identity provider will redirect with its authentication response.

    For example, https://yourdomain.slack.com/sso/saml.

    Single Logout URL

    Enter the single logout URL set in the Slack configuration.

    For example, https://yourdomain.slack.com/sso/saml/logout.

    Algorithm

    Set to RSA-SHA256.

    slack_sp_settings.png

  5. Add new attributes and set the following:

    Friendly Name

    Set to Email.

    Name

    Set to User.Email.

    Value

    Set to mail.

    Name format

    Set to unspecified.

    Sign Message

    Select the Sign Message check box.

    slack_sign_message.png

  6. Save your changes.

Slack configuration

In this section, you'll configure Slack as a service provider (SP).

  1. Download the SAML metadata and certificate for your organization from Arculix.

    Metadata download: https://sso.acceptto.com/<myorganization>/saml/download/metadata

    View metadata: https://sso.acceptto.com/<myorganization>/saml/metadata

    Certificate download: https://sso.acceptto.com/<myorganization>/saml/download/cert

  2. Log in to your Slack instance as an administrator.

  3. Navigate to Settings & administration > Workplace settings:

    slack_workspace_settings.png

  4. Select Authentication.

  5. Click Configure for SAML Authentication and set the following configurations:

    SAML 2.0 Endpoint (HTTP)

    Enter the Arculix SSO URL provided in Arculix metadata.

    For example, https://sso.acceptto.com/example/saml/auth.

    Identity Provider Issuer

    Enter the Issuer / EntityID of your Arculix tenant provided inthe Arculix metadata.

    For example, https://sso.acceptto.com/example/saml.

    slack_saml_config.png

  6. In the Public Certificate section, click edit and copy the Arculix certificate.

  7. Save the configuration.

    slack_advanced_options.png

Test your application integration

  1. Log in to the Slack panel.

    slack_login.png

  2. You will be redirected to the Arculix SSO page.

    Application login page with email

  3. After successful authentication, select your preferred MFA method to approve access to the Slack application.

    Select MFA method

  4. After successful authentication through Arculix, you will see the Slack panel.

    slack_workspace.png

Support

If you have questions or need assistance, contact SecureAuth Support.

Sales

Want to learn more about our MFA solutions? Contact our Professional Services for a demo today.

Disclaimer

All product names, trademarks, and registered trademarks are the property of their respective owners.

All company, product, and service names used in this document are for identification purposes only. The use of these names, trademarks, and brands do not constitute an endorsement by the SecureAuth Corporation.

In this section: