You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/saas-apps/slack-tutorial.md
+29-19Lines changed: 29 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: 'Tutorial: Azure Active Directory single sign-on (SSO) integration with Slack | Microsoft Docs'
2
+
title: 'Tutorial: Azure AD SSO integration with Slack'
3
3
description: Learn how to configure single sign-on between Azure Active Directory and Slack.
4
4
services: active-directory
5
5
author: jeevansd
@@ -9,11 +9,11 @@ ms.service: active-directory
9
9
ms.subservice: saas-app-tutorial
10
10
ms.workload: identity
11
11
ms.topic: tutorial
12
-
ms.date: 12/28/2020
12
+
ms.date: 06/06/2022
13
13
ms.author: jeedes
14
14
---
15
15
16
-
# Tutorial: Azure Active Directory single sign-on (SSO) integration with Slack
16
+
# Tutorial: Azure AD SSO integration with Slack
17
17
18
18
In this tutorial, you'll learn how to integrate Slack with Azure Active Directory (Azure AD). When you integrate Slack with Azure AD, you can:
19
19
@@ -38,9 +38,9 @@ To get started, you need the following items:
38
38
39
39
In this tutorial, you configure and test Azure AD SSO in a test environment.
40
40
41
-
* Slack supports **SP** initiated SSO
42
-
* Slack supports **Just In Time** user provisioning
43
-
* Slack supports [**Automated** user provisioning](./slack-provisioning-tutorial.md)
41
+
* Slack supports **SP** initiated SSO.
42
+
* Slack supports **Just In Time** user provisioning.
43
+
* Slack supports [**Automated** user provisioning](./slack-provisioning-tutorial.md).
44
44
45
45
> [!NOTE]
46
46
> Identifier of this application is a fixed string value so only one instance can be configured in one tenant.
@@ -160,31 +160,41 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
160
160
161
161
3. If you want to setup Slack manually, in a different web browser window, sign in to your Slack company site as an administrator.
162
162
163
-
2.Navigate to **Microsoft Azure AD**then go to **Team Settings**.
163
+
2.click on your workspace name in the top left, then go to **Settings & administration** -> **Workspace settings**.
164
164
165
-

165
+

166
166
167
-
3. In the **Team Settings** section, click the **Authentication** tab, and then click **Change Settings**.
167
+
3. In the **Settings & permissions** section, click the **Authentication** tab, and then click **Configure** button at SAML authentication method.
168
168
169
-

169
+

170
170
171
-
4. On the **SAML Authentication Settings** dialog, perform the following steps:
171
+
4. On the **Configure SAML authentication for Azure** dialog, perform the below steps:
172
172
173
-

173
+

174
174
175
-
a. In the **SAML 2.0 Endpoint (HTTP)** textbox, paste the value of **Login URL**, which you have copied from Azure portal.
175
+
a. In the top right, toggle **Test** mode on.
176
+
177
+
b. In the **SAML SSO URL** textbox, paste the value of **Login URL**, which you have copied from Azure portal.
178
+
179
+
c. In the **Identity provider issuer** textbox, paste the value of **Azure Ad Identifier**, which you have copied from Azure portal.
180
+
181
+
d. Open your downloaded certificate file in Notepad, copy the content of it into your clipboard, and then paste it to the **Public Certificate** textbox.
182
+
183
+
1. Expand the **Advanced options** and perform the below steps:
184
+
185
+

176
186
177
-
b. In the **Identity Provider Issuer** textbox, paste the value of **Azure Ad Identifier**, which you have copied from Azure portal.
187
+
a. If you need an end-to-end encryption key, tick the box **Sign AuthnRequest** to show the certificate.
178
188
179
-
c. Open your downloaded certificate file in Notepad, copy the content of it into your clipboard, and then paste it to the **Public Certificate** textbox.
189
+
b. Enter `https://slack.com`in the **Service provider issuer** textbox.
180
190
181
-
d. Configure the above three settings as appropriate for your Slack team. For more information about the settings, please find the **Slack's SSO configuration guide** here. `https://get.slack.help/hc/articles/220403548-Guide-to-single-sign-on-with-Slack%60`
191
+
c. Choose how the SAML response from your IDP is signed from the two options.
182
192
183
-

193
+
1. Under **Settings**, decide if members can edit their profile information (like their email or display name) after SSO is enabled. You can also choose whether SSO is required, partially required or optional.
184
194
185
-
e. Click on **expand** and enter `https://slack.com` in the **Service provider issuer** textbox.
195
+

186
196
187
-
f. Click **Save Configuration**.
197
+
1. Click **Save Configuration**.
188
198
189
199
> [!NOTE]
190
200
> If you have more than one Slack instance that you need to integrate with Azure AD, set `https://<DOMAIN NAME>.slack.com` to **Service provider issuer** so that it can pair with the Azure application **Identifier** setting.
0 commit comments