Slack Connector
Overview
Used for OneTrust Data Discovery Scanners, the Slack Connector can scan and retrieve information from chat messages in the communication tool.
This connector is currently under Public Preview. Contact OneTrust Support to request early access.
- Pod Residency
-
<app-scanner> - Category
-
Connection Application
Supported Scan Actions
|
Scan Type |
Description |
|---|---|
|
Catalog |
This will currently only list all accounts. |
|
Catalog & Scan |
This will scan for terms all chats, channels and attachments. |
Credential & System Permissions
OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base, and/or support resources.
This connector relies on OAuth client credentials with scopes to grant necessary access to the Slack app that OneTrust will integrate with.
{
"access_token": "token"
}
|
Scope |
Permission |
|---|---|
|
User Token Scope |
discovery:read - view all of the organization's messages (including all private channels and direct messages), as well as the organization's files. Customers must contact Slack to enable the discovery:read scope for use. |
Slack App Setup
The app must belong to an Enterprise Grid where the user has an owner role.
For additional information on OAuth credentials and Slack, click see OAuth Guide and Token Creation | Slack.
-
Navigate to Slack API - Apps.
-
Log in to your dedicated Slack sandbox or launch your workspace.
-
Click the Create New App button. The Create an app modal appears.
-
Select the option From scratch.
-
Provide a unique name for this new app, then choose the appropriate workspace for this new app.
-
Click the Create App button. The Basic Information screen appears.
-
Click Add features and functionality, then choose Permissions. The OAuth & Permissions screen appears.
-
Scroll to the , then click the Add an OAuth Scope button.
-
Select
discovery:read.Important:Customers must contact Slack to enable the discovery:read scope for use.
-
Navigate to Redirect URLs to add a new redirect URL for
https://localhost. Ensure that you click the Save URLs button.
-
Navigate to .
-
In the Share Your App with Other Workspaces section, click the Activate Public Distribution button.
-
Scroll up to the Share Your App with Your Workspaces section to copy the Sharable URL.
-
Paste this URL into a browser and select the correct organizational workspace.
-
Click Allow. You will be redirected to the code generation page to copy the code from the URL field.
CODElocalhost/?code=<code>&state= This site can't be reached localhost refused to connect. Try: • Checking the connection • Checking the proxy and the firewall ERR_CONNECTION_REFUSED Details Reload
-
Use this code plus the Client ID and Client Secret in order to generate the Discovery API token in your chosen developer tool.
Tip:Client ID and Client Secret can be copied from the Slack app's Basic Information screen.
JSON#Sample Response { "ok": true, "app_id": "<your-app-id>", "authed_user": { "id": "scope": "discovery:read", "access_token": "<your-generated-code>", "token_type": "user", }, "team": null, "enterprise": { "id": "<your-enterprise-id>", "name": "<your-org-name>" }, "is_enterprise_install": "true }
Scan Profile Support
For additional details on scan profile configuration and management, see Setting Up Scan Profiles.
Message Type
-
Direct Messages or Channels
Limits
-
Maximum Number of Users
-
Maximum Number of Channels
-
Maximum Number of Chat Messages
Scope
-
Include/Exclude Path Configurations: User, Channel
Collected Objects and Fields
Objects
-
Accounts
-
Messages
These objects are just scanned not ingested. Embedded or pasted images are not included.
Fields
- Field
- Description
- mail <String>
-
The SMTP address for the user.
- id <String>
-
The unique identifier for the user.
- accountEnabled <Boolean>
-
The unique identifier for OneTrust's use.