Connect Slack to Auth0
1
Slack setup
- Sign up for a Slack Developer account.
- If you haven’t already, create a Slack App. Choose the From scratch option, give it a name and choose a workspace.
- Once your app is created, copy the Client ID and Client Secret.
- In the OAuth & Permissions section on the left side navigation, do
the following:
- Under OAuth Tokens, select Token Rotation to opt in so that the app supports refresh tokens.
- Under Redirect URLs, add
https://YOUR_AUTH0_DOMAIN/login/callbackas a new Redirect URL.You can find the Auth0 domain in the Auth0 Dashboard.You can find this under Applications > [Your Application] > Settings > Basic Information > Domain.If you are using the custom domains feature, your Auth0 domain is the custom domain. You can find this under Branding > Custom Domains. - Under Scopes, add the necessary OAuth scopes your app needs to function.
2
Auth0 setup
- In the Auth0 Dashboard, navigate to Authentication > Social. Select Create Connection and then Sign in with Slack. Select Continue.
- In General, enter the Client ID and Client Secret from the Slack OAuth app you created.
- In Purpose, toggle on Connected Accounts for Token Vault. This allows the connection to retrieve and securely store access tokens for external APIs. To learn more, read Configure Connected Accounts for Token Vault.
- Select Create.
- After saving, go to the Applications tab and select the applications that should use this connection.
If your application uses Organizations, authenticate the user with the target organization before initiating the Connected Accounts flow. Token Vault still stores the Slack connected account on the user’s Auth0 profile, so each organization member authorizes their own Slack account.
Token Vault configuration example
To configure the Token Vault for your Slack connection, you can use the following code snippet in your application:Next steps
- To learn how to configure applications to access Token Vault, read Configure Token Vault.
- If your application uses Organizations, authenticate the user with the target organization before initiating the Connected Accounts flow. Connected accounts remain linked to the individual user profile.
- To learn how to get an access token to make a tool call, complete the Call third-party APIs on user’s behalf Quickstart.