Slack Connector

Overview

Used for OneTrust Data Discovery Scanners, the Slack Connector can scan and retrieve information from chat messages in the communication tool.

Note:

This connector is currently under Public Preview. Contact OneTrust Support to request early access.

Pod Residency

<app-scanner>

Category

Connection Application

Supported Scan Actions

Scan Type

Description

Catalog

This will currently only list all accounts.

Catalog & Scan

This will scan for terms all chats, channels and attachments.

Credential & System Permissions

Important:

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base, and/or support resources.

This connector relies on OAuth client credentials with scopes to grant necessary access to the Slack app that OneTrust will integrate with.

JSON
{
"access_token": "token"
}

Scope

Permission

User Token Scope

discovery:read - view all of the organization's messages (including all private channels and direct messages), as well as the organization's files.

Customers must contact Slack to enable the discovery:read scope for use.

Slack App Setup

The app must belong to an Enterprise Grid where the user has an owner role.

Note:

For additional information on OAuth credentials and Slack, click see OAuth Guide and Token Creation | Slack.

  1. Navigate to Slack API - Apps.

  2. Log in to your dedicated Slack sandbox or launch your workspace.

  3. Click the Create New App button. The Create an app modal appears.



  4. Select the option From scratch.



  5. Provide a unique name for this new app, then choose the appropriate workspace for this new app.



  6. Click the Create App button. The Basic Information screen appears.

  7. Click Add features and functionality, then choose Permissions. The OAuth & Permissions screen appears.



  8. Scroll to the Scopes > User Token Scopes, then click the Add an OAuth Scope button.



  9. Select discovery:read.

    Important:

    Customers must contact Slack to enable the discovery:read scope for use.



  10. Navigate to Redirect URLs to add a new redirect URL for https://localhost . Ensure that you click the Save URLs button.



  11. Navigate to Settings > Manage Distribution.

  12. In the Share Your App with Other Workspaces section, click the Activate Public Distribution button.



  13. Scroll up to the Share Your App with Your Workspaces section to copy the Sharable URL.



  14. Paste this URL into a browser and select the correct organizational workspace.

  15. Click Allow. You will be redirected to the code generation page to copy the code from the URL field.



    CODE
    localhost/?code=<code>&state=                                                                                                                                                                                                                                                                                 This site can't be reached                                                                                                                                                                                                                                                                                  localhost refused to connect.                                                                                                                                                                                                                                                                                 Try:                                                                                                                                                                                                                                                                                               • Checking the connection                                                                                                                                                                                                                                                                                              • Checking the proxy and the firewall                                                                                                                                                                                                                                                                                   ERR_CONNECTION_REFUSED                                                                                                                                                                                                                                                                                          Details                                                                                                                                                                                                                                                  Reload


  16. Use this code plus the Client ID and Client Secret in order to generate the Discovery API token in your chosen developer tool.

    Tip:

    Client ID and Client Secret can be copied from the Slack app's Basic Information screen.



    JSON
    #Sample Response
    {
        "ok": true, 
        "app_id": "<your-app-id>",
        "authed_user": {
            "id": 
            "scope": "discovery:read", 
            "access_token": "<your-generated-code>",
            "token_type": "user",
        }, 
        "team": null, 
        "enterprise": {
            "id": "<your-enterprise-id>",
            "name": "<your-org-name>"
        },
        "is_enterprise_install": "true
    }

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Message Type

  • Direct Messages or Channels

Limits

  • Maximum Number of Users

  • Maximum Number of Channels

  • Maximum Number of Chat Messages

Scope

  • Include/Exclude Path Configurations: User, Channel

Collected Objects and Fields

Objects

  • Accounts

  • Messages

Note:

These objects are just scanned not ingested. Embedded or pasted images are not included.

Fields

Field
Description
mail <String>

The SMTP address for the user.

id <String>

The unique identifier for the user.

accountEnabled <Boolean>

The unique identifier for OneTrust's use.