Configuring SAML SSO for Slack
These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and Slack.
Prerequisite
-
Login to ADSelfService Plus as an administrator.
- Navigate to Configuration → Self-Service → Password Sync/Single Sign On → Add Application, and select Slack from the applications displayed.
Note: You can also find Slack application that you need from the search bar located in the left pane or the alphabet wise navigation option in the right pane.
-
Click IdP details in the top-right corner of the screen.
-
In the pop-up that appears, copy the Login URL and download the SSO certificate by clicking on the Download Certificate button.
Slack (Service Provider) configuration steps
-
Login to Slack with an administrator’s credentials.
-
Click Account Name from the top-left.
-
Under Team settings, Select Authentication.
-
Enable Single sign on and click Configure SAML authentication.
-
Reconfirm your password and choose Custom SAML 2.0 and click Configure.
-
Paste the Login URL and Identity Provider URL, copied in Step 4 of Prerequisite.
-
Open the downloaded SSO certificate as a text file. Copy and paste the content it in the Identity Provider Certificate text field.
-
Under Advanced options,
-
Uncheck Authentication Sign.
-
Choose default value for AuthContextClassRef and.
-
Check Responses Signed.
-
Customize the sign-in button label.
-
Click Save the Configuration.
ADSelfService Plus (Identity Provider) configuration steps
-
Now, switch to ADSelfService Plus’ Slack configuration page.
-
Enter the Application Name and Description.
-
In the Assign Policies field, select the policies for which SSO need to be enabled.
Note:ADSelfService Plus allows you to create OU and group-based policies for your AD domains. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy.
-
Select Enable Single Sign-On.
-
Enter the Domain Name of your Slack account. For example, if you use johndoe@thinktodaytech.com to log in to Slack, then thinktodaytech.com is the domain name.
-
Enter the SP Identifier of your Slack account in the SP Identifier field. For Eg: https:// <sp_identifier>.slack.com
-
In the Name ID Format field, choose the format for the user login attribute value specific to the application.
Note: Use Unspecified as the default option if you are unsure about the format of the login attribute value used by the application.
-
Click Add Application.
Note:
For Slack, both SP and IDP initiated flows are supported.