Secure Internet and SaaS Access (ZIA)
Integrating with Slack
You can connect your Slack organization to Zscaler 3rd-Party App Governance to gain continuous visibility and governance for third-party apps installed in the Slack environment, including automation of your vetting and governance processes.
Prerequisite
A user with Admin or Owner roles is required to connect 3rd-Party App Governance to Slack workspace.
Connecting Slack to 3rd-Party App Governance
To connect Slack to 3rd-Party App Governance:
- Click the Connect icon in the left-side navigation.
The Integrations window appears.
- In the Integrations window, click Add next to Slack. You are prompted to sign in if you haven't already done so.
A consent window appears (all privileges are read-only), and you can see a detailed list of permissions and data here.
After connection is achieved, it might take a while to pull and ingest all relevant application data depending on the size of your tenant. During this time, a message is displayed that the domain is still being processed. After integration is completed, a success message appears, and the number of domains is updated. You then receive an email from Zscaler when the domain is ready for further review. To learn more about the integration statuses of a domain, see Status.
Viewing and Managing Slack Integration
You can click Slack in the Integrations window to expand and view the list of added domains along with information such as First connected, Last Synced, and Status.
- Domain: The name of the domain integrated with 3rd-Party App Governance.
- First connected: The date and time the domain was added, and the person who added the domain.
- Last Synced: The date and time the domain was last synced. If the domain has yet to sync, N/A is displayed. If the duration of the sync is excessive, the last sync time is highlighted in red.
When there are multiple domains, 3rd-Party App Governance displays the last sync with the most excessive time duration to indicate an issue so you can expand, view the domain, and take the relevant actions.
- Status: The integration status of the domain. One of the following statuses is displayed:
- Error: Failure to achieve a connection. The error message displays the reason for the failure. Contact Zscaler Support if you require further assistance.
- In progress: Connection is achieved and 3rd-Party App Governance is ingesting the relevant data. It might take a while to pull and ingest all relevant application data depending on the size of your tenant. During this time, a message is displayed that the domain is still being processed. You then receive an email from Zscaler when the domain is ready for further review.
- Success: The integration is completed successfully and the last sync time is updated.
Reconnecting Slack to 3rd-Party App Governance
You might need to reconnect Slack to 3rd-Party App Governance if an error is displayed (e.g., Grant Expired)
. To reconnect Slack to 3rd-Party App Governance:
- Click Slack in the Integrations window to expand and view the list of added domains.
- Click the Reconnect icon next to the relevant domain.
A confirmation window appears.
- Click Confirm to continue.
A consent window appears. After consent is granted, the connection is updated.
Deleting a Slack Connection
You can delete a Slack connection to 3rd-Party App Governance. To delete a Slack connection:
- Click Slack in the Integrations window to expand and view the list of added domains.
- Click the Delete icon next to the relevant domain.
A confirmation window appears.
- Click Confirm to continue.
The connection is successfully deleted.
Permissions and Data Collected
The following table lists the permissions and data collected after integration.
Although the app is requesting an "Administer a workspace" permission, 3rd-Party App Governance is utilizing a very limited set of APIs granted by this permission, designed only to read audit and activity logs.
Which permissions do we use? | What data do we get? |
View information about your identity | Basic information of the user connecting to the application |
View the name, email domain, and icon for workspaces your Slack app is connected to
| Basic information about the workspace, such as name, domain, email domain, and icon
|
View people in a workspace
| Basic information of users in your workspace
|
View email addresses of people in a workspace
| Email address of users in your workspace |
View user groups in a workspace
| List of user groups in your workspace |
Administer a workspace
| Collect workspace access logs and applications (integrations) activities such as consent, revoke, and others. This allows you to measure app usage, and detect suspicious app activity, permission anomalies, and others. |