Slack

Slack SSO - Login using WordPress Users (WP as SAML IDP) Plugin enables Single Sign-On (SSO) login into Slack using WordPress Login credentials. In this guide we will Setup SAML Single Sign-On (SSO) with WordPress in Slack by configuring Slack as Service Provider (SP) and WordPress as Identity Provider (IDP).

Note: Premium Version of WP SAML IDP Plugin is required to set up SSO with Slack.

Pre-requisites: Download And Installation

To integrate the WordPress site as an Identity Provider, you will need to install the miniOrange Login using WordPress Users (WP as SAML IDP) plugin:

Login using WordPress Users ( WP as SAML IDP )

By miniOrange

(42)

Single Sign-On (SSO) login with WordPress Users into any Service Provider like Tableau, Zoho, Zoom, Moodle, Canvas LMS, Absorb LMS, TalentLMS, etc.

 Tested with 6.3.1

Get this plugin

Guide to configure Slack Single Sign-On (SSO) Login with WordPress

1. Setup Slack as SP (Service Provider)

• Go to the WordPress IDP plugin, navigate to the IDP Metadata tab.
• Here, you can find the Identity Provider Metadata URL /XML Metadata or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), Certificate for SP configuration.

• Open a new browser tab or window, Log in to your Slack account as Account Admin.
• Go to Settings & administration and select Workplace settings.

• Select Authentication and click on Configure for SAML Authentication.

• Enter the following values in the respective fields:

SAML 2.0 Endpoint (HTTP)	You can find this in IDP Metadata tab as SAML Login URL
Identity Provider Issuer	You can find this in IDP Metadata tab as IDP-EntityID
Public Certificate	You can find this in IDP Metadata tab as Certificate


• Under Advanced Options, use the default value for the Service Provider Issuer, it must be https://slack.com.

• Under Settings, select the desired options for SAML Authentication for users and workspace.

Note: It's recommended to use 'It’s optional' for the Authentication for your workspace must be used by until the SAML configuration is fully tested. This will allow you to use both – username/password and SAML authentication options.

• Click on Save Configuration.

You have successfully configured Slack as Service Provider.

2. Configure WordPress (WP) as IdP (Identity Provider)

• In the WordPress IDP plugin, navigate to the Service Provider tab and enter the values corresponding to the information from Slack.
  

Service Provider Name	Slack
SP Entity ID or Issuer	https://slack.com
ACS URL	https://<yourdomain.slack.com>/sso/saml
NameID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Assertion Signed	Check to sign the SAML Assertion.


• Click on the Save button to save your configuration.

3. Attribute Mapping (This is a premium feature)

• In the WordPress IDP plugin, navigate to the Attribute/Role Mapping tab.
• In the User Attributes section, enter the following information and click on Save .
• You can also add more attributes by clicking on + sign to add attributes.

Name	User Meta Data
User.Email	user_email
User.Username	user_login
first_name	first_name
last_name	last_name

In this Guide, you have successfully integrated Slack - SAML Single Sign-On (SSO) with plugin- Login using WordPress Users (WP as SAML IDP). Configuring Slack as SP and WordPress as IDP. This solution ensures that you are ready to roll out secure Single Sign-On (SSO) access with SAML 2.0 Authentication into Slack using WordPress login credentials.

Additional Resources

• What is Single Sign-On (SSO)?
• What is SAML?
• Frequently Asked Questions (FAQs)