Entitle for Slack

Slack is a messaging and collaboration platform designed for teams and workplaces. It allows users to communicate, share files, and collaborate in real-time through channels, direct messages, and integrations with various other tools and services.

Entitle can be added as an app on Slack. This will require your Admin to configure the integration between Entitle and Slack through the Entitle admin console. Following the integration, the Entitle app is added to the list of available apps in your organization, but you will still need to add it to your Apps list. The interaction in the Entitle App is through “/” (slash) commands, as described below.

💡

Important

Slack requires a one-to-one authorization between the Entitle email address of a user and their Slack instance. Otherwise, the integration will not be able to authorize correctly when a user tries to use the Entitle app in Slack.

Adding Entitle to your Apps list

In some cases, the Entitle app will be automatically added to your Apps list. If it was not added automatically, follow the instructions below to add it.

To add the Entitle app:

1. In Slack on the left, click More and then click Apps. The Apps directory screen is displayed.

2. Click the Entitle app to add it to your Apps list.

Creating a new permission request through Slack

In some cases, the Entitle app will be automatically added to your Apps list. If it was not added automatically, follow the instructions below to add it.

To add a new request:

1. In Slack, select the Entitle app.
2. In the chat box, type /entitle and then select **access_request.** The following dialog is prompted.

3. In the Request Type field, select the type of desired request type.
4. According to the request type selected, fill in the additional information, as described in the Creating a new request section.
5. Click Send Request. The following success message is displayed.

The approver will receive a message via Slack regarding the summary of your request, which will include the ticket linked to it (in case the requester links such).

When the permission is approved, another message is displayed, indicating that the request has been approved. To view a list of all your requests, click View all your requests.

If your request has been modified by the reviewer, the original request details will be displayed followed by the modified permissions.

Logging in to the requested service by ephemeral credentials

Some services, such as MongoDB, do not support SSO or may be not configured to work with the organization IdP. For those services the user logs in directly to the service. In these cases, following the JIT request approval, the response may include login information with ephemeral credentials which result with following experience:

1. Click View account details to view the login information, including the username, password, and the connection string. This information will disappear after 60 minutes. At this point you can use these details to connect to the service.

After 60 minutes you will not be able to see these details, and the following message will appear instead.

Adding a new comment on Slack

It is possible to receive notifications on new comments that were added to the request and to view the comments.

If a comment was added to the request, the following notification will be displayed:

The comment itself is presented in Slack. However, it is also possible to view it in context, by clicking View Comment.

The comment is presented in the Activity Pane of the My Requests screen.

From here you can reply to the comment and add additional comments. Every time a comment/reply is added a new Slack notification is generated for the recipient of the comment.