- Overview
- Configuration
Slack
Streamline user access management with Slack - ADManager Plus integration
Slack is a comprehensive cloud productivity platform used by many businesses for communication and collaboration. By integrating Slack to ADManager Plus, IT teams can schedule and automate tasks within the Slack workspace, including provisioning and deprovisioning accounts, managing access, and ensuring enterprise security. Additionally, the integration allows for the monitoring and regulation of critical tasks, such as revoking licenses and deleting user accounts, by implementing multi-level business workflows. This ensures that organizations central control over user identities, permissions, and tasks while improving overall operational efficiency and security across both platforms.
Automate Workflows
Streamline IT workflows, enhances security, and saves valuable time by efficiently managing user access rights and reducing manual administrative tasks.
Accelerate business productivity
Securely assign permissions and access to resources as and when employees are provisioned to improve productivity.
How to integrate Slack with ADManager Plus
Prerequisites
Slack uses OAuth 2.0 to authorize API requests. Please ensure to provide the Client Id and Client Secret with permissions to retrieve the desired information and perform tasks in Slack. Refer to Slack's API references page for more details.
Privileges
- To import users (an inbound action): Ensure the account used for authorization has permission to read all user accounts.
- To perform any action or query in Slack (an outbound action): Ensure the account used for authorization has permission to perform the desired action.
Authorization configuration
- Log in to ADManager Plus and navigate to Directory/Application Settings.
- Navigate to Application Integrations, then search for and select Slack.
- On the Slack Configuration page, toggle the Enable Slack Integration button on.
- Click Authorization.
- Perform the steps to generate the Client Id and Client Secret from Slack, then paste them in the respective fields.
- Click Configure.
Inbound webhook configuration
An inbound webhook enables you to send user data from Slack to ADManager Plus. To configure an inbound webhook for Slack:
- Under Inbound Webhook, click Slack Endpoint Configuration.
- A preconfigured endpoint, Slack USERS ENDPOINT, is available with the required Endpoint URL, HTTP Method, Headers, and Parameters fields filled out to fetch user information from Slack. It uses the repeat calling option to retrieve up to 100 users per API call and continues fetching data until no users remain. Click here to learn more about this endpoint configuration.
- If you prefer to use a new endpoint to import users, you can configure one by clicking + Add API Endpoint and filling in the required fields according to Slack's API references. Click here to learn how. Note:
- The Authorization header is preconfigured for authenticating API requests as formatted during authorization configuration.
- Refer to Slack's API references and configure additional headers and parameters, if required.
- Macros can be added to the endpoint URL, headers, parameters, and message body to dynamically modify the configuration using the macro chooser.
- Once done, click Test & Save to validate and save the endpoint, or click Save as Draft to store the configuration as a draft without testing the endpoint.
- If you choose Test & Save, a response window will be displayed. This response window includes the following tabs:
- Response: This displays API response parameters in a tree structure. You can set the data type for each field:
- Text (default)
- Number
- Timestamp
- Array
Text, Number, and Timestamp are used for advanced filter criteria. Array is used to select a specific value from a response array (refer to JSON conditional parsing).
- Response Details: This displays the complete response message in text format.
- Request: This displays the request headers, parameters, and message body.
- Response: This displays API response parameters in a tree structure. You can set the data type for each field:
- If you choose Test & Save, a response window will be displayed. This response window includes the following tabs:
- Click Save. Note: You can configure multiple endpoints for Slack using the + Add API Endpoint button. Click here to learn how.
- Click Data Source - LDAP Attribute Mapping to match endpoints and to map AD LDAP attributes with the respective attributes in Slack. ADManager Plus also lets you customize the attribute format from Slack.
- Click + Add New Configuration and perform the following actions:
- Enter the Configuration Name and Description and select the Automation Category from the drop-down menu.
- In the Select endpoint section, select the desired endpoint and a Primary Key that is unique to a user (e.g., employeeIdentifier). Note: When multiple endpoints are configured, this attribute must hold the same value on all the endpoints.
- In the Attribute Mapping section, select the attribute from the LDAP Attribute Name drop-down menu and map it to the corresponding column in Slack. Macros are also supported in attribute mapping. To create a new custom format, click Add New Format.
- Click Save.
Outbound webhook configuration
An outbound webhook enables you to synchronize the changes made in AD with Slack using ADManager Plus or fetch the required details from Slack and synchronize them with AD. To configure an outbound webhook for Slack:
- Under Outbound Webhook, click Slack Webhook Configuration.
- A preconfigured endpoint, Slack Send Message Endpoint, is available with the required Endpoint URL, API Method, Headers, and Parameters fields filled out to send messages to Slack channels or users. Alternatively, if you prefer to create a new endpoint, click + Add Webhook.
- Enter a name and description for this webhook.
- Decide on the action that has to be performed and refer to Slack's API references for the API details, such as the URL, headers, parameters, and other requirements that will be needed. Enter the employee details value in the Parameters field.
- Select the HTTP Method that will enable you to perform the desired action on the endpoint from the drop-down menu.
- Enter the Endpoint URL.
- Configure the Headers, Parameters, and Message Type in the appropriate format based on the API call that you would like to perform. Note: Macros can be added to the endpoint URL, headers, parameters, and message body to dynamically modify the configuration using the macro chooser.
- Click Test and Save to validate and save the webhook, or click Save as Draft to store the webhook as a draft without testing it.
- If you select Test and Save, a response window will be displayed. Choose the user or group on which the API request should be tested and click OK. This triggers a real-time call to the endpoint URL, allowing you to verify whether macros are applied correctly. You may skip selecting a user or group. However, if you do make a selection, the macros present in the webhook will be parsed using the selected object’s values.
- Response: This displays API response parameters in a tree structure. You can set the data type for each field:
- Text (default)
- Number
- Timestamp
Text, Number, and Timestamp are used for advanced filter criteria.
- Response Details: This displays the complete response message in text format.
- Request: This displays the request headers, parameters, and message body.
- Response: This displays API response parameters in a tree structure. You can set the data type for each field:
- If you select Test and Save, a response window will be displayed. Choose the user or group on which the API request should be tested and click OK. This triggers a real-time call to the endpoint URL, allowing you to verify whether macros are applied correctly. You may skip selecting a user or group. However, if you do make a selection, the macros present in the webhook will be parsed using the selected object’s values.
- Verify the response for the expected API behavior and click Save.