SaaS Security Administrator's Guide
    : Begin Scanning a Slack for Pro and Business App
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. SaaS Security Administrator's Guide
    4. Data Security
    5. Secure Sanctioned SaaS Apps on Data Security
    6. Add Cloud Apps to Data Security
    7. Begin Scanning a Slack for Pro and Business App
    Download PDF

    SaaS Security Administrator's Guide

    Begin Scanning a Slack for Pro and Business App

    Table of Contents

    Begin Scanning a Slack for Pro and Business App

    Authorize Data Security to connect to Slack for Pro and Business to scan all content shared within the app.
    To connect Slack Pro and Business to Data Security and begin scanning assets, you need to:
    • Go to your Slack WorkspaceTools&SettingsManage AppsApp Management Settings and disable the Only Allow Apps from Slack App Directory option. If this setting is enabled, you will not be able to onboard your app.
    • Ensure that you have a Slack administrator account.
    • Grant Data Security access to Slack.
    • Add the Slack Pro and Business app to Data Security, providing Data Security information about your Slack account.
    Support for automated remediation capabilities varies by SaaS application.

    Add Slack Pro and Business App

    In order for Data Security to scan assets, you must consent to specific permissions during adding the Slack Pro and Business app.
    1. (Recommended) Add your Slack Pro or Slack Business+ domain as an internal domain.
    2. Sign out of all Slack workspaces.
      Doing so ensures that you sign in under the correct account and workspace.
    3. To add the Slack app, go to Data SecurityApplicationsAdd ApplicationSlack Pro and Business.
      1. Select Slack Pro and Business.
      2. Select Connect to Slack Pro and Business Account.
      3. Enter your team’s Slack domain or workspace (top-level organization), then Continue.
      4. Sign in with an administrator account.
      5. Review and Allow the requested permissions.
        Data Security requires these permissions to scan your assets on Slack Pro and Slack Business.
        After authentication, Data Security adds the new Slack app to the list of Cloud Apps as Slack n, where n is the number of Slack app instances that you have connected to Data Security. You’ll specify a descriptive name soon.
        The token needed for notification service in Slack is added in this step. You don't need to add it separately.
    4. (Optional) Give a descriptive name to this app instance.
      1. Select the Slack n link on the Cloud Apps list.
      2. Enter a descriptive Name to differentiate this instance of Slack from other instances.
      3. Click Done to save your changes.
    5. To start scanning the new Slack app for incidents, go to Data SecurityApplicationsSlack Pro and BusinessEnable Scanning.
    6. Monitor the scan results.
      During the discovery phase, as Data Security scans files and matches them against enabled policy rules.
      Verify that your default policy rules are effective. If the results don’t capture all the risks or you see false positives, improve your results.

    Identify Risks

    When you add a new cloud app, Data Security automatically scans the cloud app against the default data patterns and displays the match occurrences. You can take action now to improve your scan results and identify risks.
    1. (Optional) Modify match criteria for existing policy rules.
    2. (Optional) Add new policy rules.
      Consider the business use of your app, then identify risks unique to your organization. As necessary, add new:
    3. (Optional) Configure or edit a data pattern.
      You can Configure Data Patterns to identify specific strings of text, characters, words, or patterns to make it possible to find all instances of text that match a data pattern you specify.

    Fix Slack Pro and Business App Onboarding Issues

    The most common issues related to adding or accessing your Slack Enterprise Grid app are as follows:
    Symptom
    Explanation
    Solution
    When you attempt to log in to your Slack administrator account during the onboarding process, it returns an authorization error: Something went wrong when authorizing Data Security for Slack.
    You have a Slack workspace open in your browser for a workspace other than the workspace associated with the administrator account that you’re using to onboard the Slack Pro and Business app or the administrator account isn’t an administrator.
    Log out of all Slack workspaces and verify that you are an administrator for that Slack account that you’re using to onboard the Slack Pro and Business app.

    © 2024 Palo Alto Networks, Inc. All rights reserved.