Connecting Slack

Last updated: October 8, 2024

After this article...

You'll be able to connect the Slack integration to Lumos and resolve common issues that arise when connecting.

Required plan & roles

There is no minimum plan needed to connect the Slack integration. If you want to suspend Slack user accounts via Lumos, you'll need the Business+ plan or above.

Your Slack user needs to be a Workspace Admin to connect this integration.

Instructions

1. Find the Slack card in your Lumos integrations (Reconnect or add new)

2. If your company is on the Enterprise Grid plan, check the "Is Enterprise Grid?" checkbox. Otherwise, leave it blank.

3. Click "Connect Slack".

4. Choose the correct workspace in the Slack pop-up, then click "Allow".

If you are on Enterprise Grid...

5. If your company is on Enterprise Grid, you need to approve the Lumos app for your workspace and add it to any workspaces where you want to use the Lumos Slack app. Instructions to approve the app can be found here (under "Approve an app for your org") and instructions on how to add it to your workspaces can be found here (under "Add an app to workspaces").

Scopes

The Slack integration will ask for the following scopes via OAuth during setup.

If you do not require or allow admin scopes for Slack, you can use Slack that only reads the users (admin:users:read) and teams (admin:teams:read) to be able to send notifications to these users. You will not be able to auto-provision or deprovision via Slack with this scope. If you would like to use this non-admin scope, please contact us via Slack or at support@lumos.com.

If you reconnect Slack with new scopes, you need to revoke your previous OAuth token in Slack, otherwise Slack won't request the new scopes when reconnecting!

Bot Token scopes

Scope

Required

Description

app_mentions:read

View messages that directly mention @appstore in conversations that the app is in.

chat:write

Send messages as @appstore

files:read

View files shared in channels and conversations that Lumos has been added to

files:write

Upload, edit, and delete files as Lumos

im:history

View messages and other content in direct messages that Lumos has been added to

im:write

Start direct messages with people

links:read

View URLs in messages

mpim:history

View messages and other content in group direct messages that Lumos has been added to

users:read

View people in a workspace

users:read.email

View email addresses of people in a workspace

User Token scopes

Scope

Required

Description

admin

Administer a workspace

admin.teams:read

Access information about a workspace

admin.users:read

Access a workspace’s profile information

users.profile:write

Edit a user’s profile information and status

users:read

View people in a workspace

users:read.email

View email addresses of people in a workspace

Troubleshooting

Slack is not returning any users.

Situation: Slack is connected but not returning any users in the Accounts tab.

Solution: You may need to approve the Lumos app in Slack and add it to your Slack workspaces. More details can be found in step 5 in the instructions above.

Downgrading scopes is not working.

Situation: You're working with the Lumos team to restrict Slack scopes (e.g. to read-only), and even after re-connecting Slack, your scopes aren't decreasing.

Solution:

Slack's APIs do not natively support downgrading scopes by re-connecting. In order to decrease your scopes, you will need to do the following:

  • User Token Scopes: Ask the Lumos team to "revoke" your current token, then re-connect the Slack integration

  • Bot Token Scopes: Go to your Slack admin panel and visit the "Installed Apps" page. On the row for the Lumos app, click on "..." then "Uninstall from your organization". Once uninstalled, re-connect the Slack integration in Lumos, and follow the connection instructions again.