This integration is for backward compatibility only.
For new integrations, please use Slack Community or Slack Enterprise integration.
Reco is the leading SaaS security platform dedicated to securing your organization's SaaS environment.This guide is designed to assist you in integrating Slack with Reco, enabling critical insights into your organization's communication platform security. Here's what we'll cover:
Note: Reco Admin privileges are required to complete this integration. Please contact your company's Reco Administrator or Customer Success Manager if you need this role.
Introduction to Slack
Slack is a comprehensive communication platform that allows organizations to streamline their communication by offering features like channels, direct messaging, and file sharing. It's designed to improve team collaboration by centralizing conversations and integrating with numerous other SaaS tools.
Why Integrate Slack with Reco?
Integrating Slack with Reco enhances your security posture by monitoring and analyzing your Slack environment. This integration provides clarity on your Slack usage, identifies, potential misconfigurations and vulnerabilities and ensuring Slack posture adheres to the best standards, and ensures compliance with security policies. Ultimately, it aims to safeguard your communication channels from threats and unauthorized access.
Benefits of Integrating Slack with Reco
Enhanced Security Monitoring: Gain insights into potentially risky behaviors, such as the sharing of sensitive information within public channels or direct messages.
Automated Compliance Checks: Ensure your Slack usage adheres to established security policies , posture and compliance requirements.
Proactive Threat Detection: Identify and mitigate threats in real-time, minimizing potential security breaches.
Prerequisites for Integration
Before starting the integration process, ensure you meet the following requirements:
Reco Admin Role: A user with an Admin Role in Reco is necessary to initiate the integration process.
Slack Workspace Admin Role: The user performing the integration must have the Slack Workspace Admin role to manage permissions and integrations within Slack.
You can find a comprehensive overview of the permissions and roles within Slack, including the Workspace Admin role,in their official guide
Required Permissions for Integration
Reco requires specific permissions to effectively integrate with Slack and collect necessary data. These permissions are designed to respect user privacy while enabling comprehensive security monitoring:
channels:history, channels:join, channels:read: For monitoring public channels.
chat:write: To send security alerts within Slack.
files:read: For reading file metadata to determine sensitive information shared.
groups:history, groups:read: To understand history in private channels.
users:read, users:read.email: To identify user roles and activities.
Step-by-Step Integration Guide
Login to Reco Platform: Use your credentials to access the Reco dashboard.
Navigate to Integrations: Select "Configurations" and then "Integrations".
Add integration for Slack: click on "Add Integration" and search for Slack
Consent and Authenticate: You will be redirected to a Slack consent page. Click "Allow" to grant Reco access to your Slack workspace.
Activate Integration: The integration status will update to "Active" upon successful integration.
Data Ingestion: What We Collect
Reco respects your data privacy and security. For the integration for Slack, we focus on ingesting metadata and specific content that enhances the security and compliance of your communication channels, without compromising personal information.
What do we ingest exactly?
Scope | Description | Reason |
channels:history | View messages and other content in public channels that Reco has been added to | For performing regular security audits, identifying and flagging potential security risks like sharing sensitive information or unauthorized tools. |
channels:join | Join public channels in a workspace | To monitor and protect against unauthorized access, scanning for security risks like sharing sensitive information or unauthorized tools. |
channels:read | View basic information about public channels in a workspace | For monitoring channel activity and protecting against potential security risks. |
chat:write | Send messages as @RecoLabs Data Protector | To share security findings with end-users, alerting them of potential risks or incidents for proactive protection. |
files:read | View files shared in channels and conversations that Reco has been added to | To enhance security by scanning for sensitive or confidential files, alerting users of potential risks. |
groups:history | View messages and other content in private channels that Reco has been added to | For gathering data about groups and relations, performing analytics to identify trends and improve efficiency. |
groups:read | View basic information about private channels that Reco has been added to | To enhance security by identifying risks like sensitive information sharing or unauthorized tools, ensuring data protection and compliance. |
reactions:read | View emoji reactions and their associated content in channels and conversations that Reco has been added to | For gathering data about message reactions, performing analytics to identify communication trends and improve efficiency. |
team:read | View the name, email domain, and icon for workspaces Reco is connected to | To gather data about team's Slack usage, analyzing channels and users for improving communication efficiency. |
usergroups:read | View user groups in a workspace | For gathering data about Slack user groups, identifying usage patterns to improve communication and collaboration efficiency. |
users.profile:read | View profile details about people in a workspace | To gather user profile data, including roles and responsibilities, for analytics and identifying communication trends. |
users:read | View people in a workspace | For gathering data about users, including roles and responsibilities, to analyze and improve communication efficiency. |
users:read.email | View email addresses of people in a workspace | To correlate identities between Slack and additional SaaS tools. |
This guide should serve as a foundational document for integrating Slack with Reco, tailored to facilitate a smooth and secure integration process, addressing the needs and concerns of both security and IT teams.