This page explains the required pre-configuration when integrating Josys with Slack using the Google Workspace Auth settings.
Overview
This page explains the required pre-configuration when integrating Josys with Slack using the Google Workspace Auth settings.
Account Provisioning/Deprovisioning Types by Slack Plan
Josys supports integration with Slack using two methods: OAuth integration and Google Workspace Auth integration. Please check the supported features for each Slack plan below.
*To check your current subscription plan, you can send "/verify" in Slack.
Authentication Method |
Supported Plans |
Supported Features |
||
|---|---|---|---|---|
Account Provisioning |
Account Deprovisioning |
User List Visualization |
||
| OAuth (SCIM API) | Business+ / Enterprise Grid | 〇 | 〇 | 〇 |
| Google Workspace Auth (Click to open the official Slack page) | Pro / Business+ | 〇 | × | 〇 |
| Google Workspace SAML | Not Supported | Not Supported | Not Supported | Not Supported |
Configuring Google Workspace Auth in Slack Admin Console
The following section describes how to configure Google Workspace Auth.
Slack Official Documentation: https://slack.com/intl/ja-jp/help/articles/204078066-Google-Workspace-single-sign-on
- Open the Slack app.
- Click your workspace name in the top left > "Settings & administration" > "Workspace settings". *This will open a browser window.
- Open the left menu and click "SSO & Authentication".
- Click the button to configure Google authentication.
- Configure the allowed items and member restrictions for using SSO. *These can be changed later. If you expect external guest users (users with different email domains) to log in, select "Workspace members only" under "Require Google authentication for:".
- You will be redirected to the Google login page. Authenticate the access from Slack using your Google Workspace administrator account.
- When configuring this for the first time, please contact Slack Support to request adding your domain to the allowlist.
- Enter "Auth" in the topic field.
In the description field ("Add anything else that could help us solve your issue"), enter the following details and send the message. - Please add the following domain to the allowlist for Google Auth configuration. Domain to add: ●●●● *Enter your company's Google account domain
Workspace URL: ●●●●●●●●.slack.com
Verification Code: ●●●-●●● The verification code can be generated by typing "/verify" in Slack and sending it, which will trigger an automatic reply. - You can check the response from Slack by clicking "View support history".
*Slack's Japanese support is available on weekdays from 9:00 to 17:00 (JST), excluding weekends and holidays. - Once support has completed the setup, log out and log back in to confirm that the login has switched to Google SSO.
-
After that, the setup is complete when the connected domain name is displayed under the authentication tab in the admin console as shown below.
How Slack Pro Plan Users Can Provision/Deprovision Accounts in Josys
- Refer to this help page and assign a Google Workspace account to the member you want to provision a Slack account for.
- Provide the created Google Workspace account information to the employee and have them log in to Slack using Google SSO.
- The Slack account will be created when they log in to Slack via Google SSO. After that, go to "Apps > App Catalog" in Josys, click the "Slack" row, and click the "Sync" button to integrate the Slack account data into Josys.
How to Disable Google Authentication in Slack Admin Console
- Select "Settings & administration" from the menu, then click "Workspace settings".
- Open the left menu and click "SSO & Authentication".
- Click the button to disable Google authentication.
- A confirmation screen will appear. Click the "Disable Google authentication" button.
- Logging in via Google SSO will be disabled.
Q: On the App Deactivation/Deletion screen, the message "Account management is not supported in Josys" is displayed, and I cannot deactivate the Slack account.
This error occurs when the Slack integration method is set to "Google Workspace Authentication (Google Auth SSO)".
When integrated via Google Workspace Authentication, even if your Slack plan is Business+ (or Enterprise Grid), API limitations prevent Josys from executing account deactivation (deletion). Only account visualization and provisioning are supported.
If you want to deactivate accounts from Josys, please use a supported Business+ (or Enterprise Grid) plan and re-integrate using Slack's native OAuth authentication.
*Note: The "Delete Account" action for Slack in Josys performs an "Account Deactivation" in Slack. It does not permanently delete the account.