Slack integration

About

The Slack integration, shown in ControlMap as Slack User Access, brings your Slack workspace's user data into ControlMap automatically. ControlMap lists the workspace's members as user accounts and records which of them are admins and whether two-factor authentication is on. This gives you evidence of who has access to Slack and whether they are protected by MFA, which auditors often ask for.

When it scans, the integration does these things:

Creates a user account for each member of the Slack workspace, with the provider Slack User. Bots, and members without an email address or first name, are skipped.
Records for each account whether the person is an admin, whether two-factor authentication is on, and whether the account is deleted.
Runs three compliance checks: Is MFA enabled for Slack users, List of admin users on Slack, and Is MFA enabled for Slack admins.

This integration reads user data for compliance evidence. To receive your own ControlMap notifications in Slack, connect your Slack account from My Profile instead. See the Account menu and settings article.

Before you start

Have these ready:

Setting up integrations from the client portal is part of the Pro plan. For details, see the Free, Essentials and Pro plans article.
The Slack workspace whose members you want ControlMap to review.
A Slack user who can sign in to that workspace. You approve ControlMap's access on Slack's own page during setup.

Connect Slack

Go to Monitor › Integrations and select Add Integration.
Search for Slack. Its card is named Slack User Access, with the category Email & Collaboration and the description "Get access data from Slack".
Select the Slack User Access card. The setup page opens on the Connection step.

The Add Integration window with Slack typed in the search box and the Slack User Access card showing below it

On the Connection step, select Connect to Slack. There are no fields to fill in.
Slack's authorization page opens. ControlMap asks Slack for permission to read the workspace's users and their email addresses. Approve it. When Slack finishes, you return to ControlMap.
Select Next: Checks. It stays off until Slack returns you to ControlMap. If you come back to this step later, the button reads Reconnect to Slack.
Complete the remaining steps as described in the Connect an integration article.

The Add Slack User Access setup page on the Connection step, with the Connect to Slack button and the four steps along the top

What you'll see after connecting

ControlMap collects Slack data on the schedule you chose, and shows it in these places:

User Accounts in Monitor: one account for each Slack workspace member, with the provider Slack User, showing whether the account is an admin and whether MFA is enrolled.
Compliance Checks in Monitor: the three Slack checks. They show No Data until the first scan finishes.

Disconnect or change settings

To change the schedule, watchers or other settings, go to Monitor › Integrations and select the Slack User Access card. See the Connect an integration article for the tabs on the connection's page.

To remove the connection, select the bin icon on the Slack User Access card and choose Yes to confirm. Deleting an integration also deletes all of its assets and their compliance status.