Prerequisites
- A Business+ or Enterprise Grid plan in Slack.
- Workspace owner or Org owner role in Slack.
1. If you're a Zoho One user:
- Sign in to Zoho One
, then click Directory in the left menu.
- Go to Marketplace, then click Browse Applications.
- Use the search bar to find and install Slack.
2. If you're a Zoho Directory user:
- Sign in to Zoho Directory
, then click Admin Panel in the left menu.
- Go to Applications, then click Add Application.
- Use the search bar to find and add Slack.
3. Name your app and enter the Subdomain name.

Note: To find the subdomain of your Slack URL, sign in to Slack as a workspace owner, click on your workspace name in the top left, click
Workspace settings under
Tools & settings, ensure you're in the Settings tab, then scroll down to
Workspace Name & URL. The subdomain is the part of the
URL that comes immediately before ".slack.com". For example, if your URL is
https://zylker.slack.com, then your URL subdomain is "zylker".
4. If
you want to test the SAML configuration before allowing users to access
Slack, uncheck Display app to users. You can later make the app visible
to all users.
5. Click Add.
6. Click Assign Users, choose yourself from the list, then click Assign.
7. Click on the Single Sign-On tab.
8. Click Service Provider Details to check and verify the SP details. Below ATTRIBUTE MAPPING, Click , enter "User.Email" under Attribute Name, then select Primary Email Address under Attribute Value.
9. Click Identity Provider Details, then copy the Sign-in URL, the X.509 Certificate, and the Issuer.
1. Sign in to Slack as the workspace owner.
2. Click on your workspace name in the top-left corner.
3. Click Workspace settings under Tools & settings.
4. Go to the Authentication tab on the Settings & permissions page.
5. Under SAML authentication, click Configure.
6. Enter the details copied in Step 9 of the previous section.
- Enter the Sign-in URL under SAML SSO URL.
- Enter the Issuer under Identity Provider Issuer.
- Enter the X.509 Certificate under Public Certificate.
7. Click Expand next to Advanced options, then uncheck the Responses Signed option.
8. Under Settings, choose It's optional under Authentication for your workspace must be used by.
9. Click Save Configuration.
10. Slack will test your configuration before letting you save it by asking you to sign in to Zoho Directory. Ensure the account you're signing in to has the same email address as your Slack account.
SCIM Provisioning
SCIM Provisioning creates, updates, and deletes users in Slack whenever they are created, updated, or deleted in Zoho Directory. This simplifies user management, allowing you to manage users across all applications from a single place: Zoho Directory.
Enforce SAML SSO
After successfully testing SSO, you can enforce it for all users. Once this is done, your users will no longer be able to sign in using their Slack credentials. To restrict users to SSO:
1. Sign in to Slack as a workspace owner.
2. Click Workspace settings under Tools & settings.
3. Go to the Authentication tab on the Settings & permissions page.
4. Under SAML authentication, click Change Settings.
5. Under Settings, choose All workspace members under Authentication for your workspace must be used by.
6. Click Save Configuration.
Make app visible to all users
After successfully testing the SSO, you can make Slack available for all users to access from their My Apps pages.
To make Slack visible to all users:
1. Sign in to the Zoho Directory Admin Panel.
2. Go to Applications, then click Slack.
3. Click Unhide.
4. You can now access Slack from Zoho Directory's My Apps page.