Slack Human-in-the-Loop

Configure a Slack channel as an Agent Identity Security Human-in-the-Loop (HITL) approval channel so that Agent Identity Security access policies can route approval requests to Slack for human review.

When an Agent Identity Security access policy requires human approval, Agent Identity Security sends an interactive message to the configured Slack channel. Reviewers can approve or reject the action directly from Slack. The integration requires a custom Slack app installed in your workspace.

Important: Agent Identity Security access policies that reference a deleted HITL channel will stop functioning. Update or remove policies before deleting a HITL channel instance.

Before You Begin

  1. Ensure you have permission to install apps in your Slack workspace.
  2. Have your Agent Identity Security instance URL available it is embedded in the generated Slack app manifest.
  1. On the Integrations page, click Add Integration.
  2. In the Integration Catalog, under HITL Channel, click Slack Human-in-the-Loop.
    The Slack Human-in-the-Loop configuration screen is displayed.
  3. Under Instance Details, enter the following:
    FieldDescription
    *Instance NameUnique name for this Slack HITL channel instance. Example: Security Approvals Slack.
    DescriptionOptional description to identify the purpose or environment covered.

    *: Mandatory fields

  4. Click Generate Slack Manifest.
    Agent Identity Security generates a Slack app manifest pre-configured with the required event subscriptions, interactive components, and OAuth scopes for this instance.
  5. Navigate to https://api.slack.com/apps?new_app=1 in your browser.
  6. Select From a Manifest, choose your workspace, and paste the generated manifest.
  7. Review the permissions and click Create to create the Slack app.
  8. Install the app to your workspace when prompted.
  9. In the Slack app settings, navigate to Basic Information > App Credentials and copy the following values:
    FieldWhere to Find It
    *Client IDSlack app settings > Basic Information > App Credentials > Client ID.
    *Client SecretSlack app settings > Basic Information > App Credentials > Client Secret.

    *: Mandatory fields
  10. Return to Agent Identity Security, enter the Client ID and Client Secret in the Credentials section, and click Create Instance.
    The integration instance is created. Agent Identity Security begins routing policy approval requests to the configured Slack channel.
When an Agent Identity Security policy triggers an approval, Agent Identity Security sends an interactive message to the Slack channel. Reviewers approve or reject directly from Slack. Navigate to Policies to configure which policies use this HITL channel.