# BalkanID Slackbot

## **Introduction: Seamless Security and Access Management in Slack**

The BalkanID Slackbot integrates powerful identity security and access management capabilities directly into your Slack workspace. It is designed to be your team's central hub for managing application access, ensuring that security workflows are not only robust but also efficient and user-friendly.

By bringing critical notifications and approval processes into the collaborative environment your team already uses, the Slackbot eliminates friction, reduces response times, and enhances your organization's overall security posture.

#### **Core Capabilities**

* [**Timely Access Review Notifications**](https://docs.balkan.id/user-access-reviews/access-review-management/access-review-campaign-notifications-and-reminders#access-review-notifications-with-balkanid-slackbot)**:** Stay on top of user access reviews with automated notifications delivered via Slack. The bot alerts reviewers when campaigns are due, ensuring that standing privileges are regularly examined and access rights remain appropriate, thereby strengthening your security compliance.
* **Streamlined Access Requests:** Empower your users to request, approve, or deny access to applications directly through Slack commands and interactive modals on Slack. This removes the need to switch contexts or log into different platforms, accelerating the entire process from request to fulfillment.
* [**Real-time Security Alerts**](https://docs.balkan.id/iam-risk-analyzer/findings/findings-daily-alert-with-balkanid-slackbot)**:** Receive immediate alerts regarding security risks and misconfigurations discovered by the BalkanID platform. By notifying you directly in Slack, the bot enables your security team to acknowledge and remediate potential threats faster than ever.

***

### **Setting up the BalkanID Slackbot**

This guide will walk you through the simple process of installing and configuring the BalkanID Slackbot for your workspace.

#### **Prerequisites**

Before you begin, please ensure you have the following permissions. You must be:

1. An **Admin** in your BalkanID tenant.
2. A **Workspace Admin** in the Slack workspace you wish to connect.

> **Note:** The BalkanID Slackbot currently supports a one-to-one mapping. This means one BalkanID tenant can be connected to only one Slack workspace.

#### **Installation steps**

1. **Log in** to [app.balkan.id](https://app.balkan.id/) and select the tenant which you will be linking slack workspace with and then click on the Slackbot installation url. At this time the Slackbot can handle **one BalkanID tenant connection with one Slack workspace**.
2. Navigate to the [Configure > System Notifications](https://app.balkan.id/configure/notifications) page and under `Notification Channels`, click the `Install BalkanID Slackbot` button.

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FSa9fDnJJf3fWBra7rMaA%2Fimage.png?alt=media&#x26;token=b7370115-a358-4f93-8438-0459438c5b04" alt="" width="563"><figcaption></figcaption></figure>
3. From the top right corner, **select the workspace** you want to install the Slackbot in and click on **“Allow”** to approve the scopes required by the Slackbot.<br>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FDSWkHwROjMdBepJlCPrA%2Fimage.png?alt=media&#x26;token=13bdcb28-110c-4493-9417-d5502ead8816" alt=""><figcaption></figcaption></figure>
4. The Slackbot is now installed in your workspace, and you'll be returned to the Configure > System Notifications page.<br>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FCNRspuehmQCJ306N83Gj%2Fimage.png?alt=media&#x26;token=77e3e81e-73b7-4cef-852f-ef92227e8653" alt="" width="563"><figcaption></figcaption></figure>

After it is installed in your Slack workspace, you can also find the Slackbot by clicking on “Add apps” and then search for “BalkanID”:

<figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2F3pHi6NXEnJy87kr6pVC0%2Fimage.png?alt=media&#x26;token=91d969bd-c4f5-451b-80bd-94d9ef6339b1" alt="" width="375"><figcaption></figcaption></figure>

<figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2F3CZ8FtO9Q8QjLIMjIeGh%2Fimage.png?alt=media&#x26;token=3d5a541e-e8fb-4a68-bc22-f94e29ce1d97" alt=""><figcaption></figcaption></figure>

### **How Authentication Works: Linking Users**

The BalkanID Slackbot authenticates users by matching their Slack email address to a user profile in your BalkanID tenant.

> **Crucial Point:** For the Slackbot to work, a user's primary email address in their Slack profile **must exactly match** the email address associated with their user profile in BalkanID.

**For Example:**

If a Slack user named Cameron Anderson has the email address `canderson@testuser.com`, they must also exist as a BalkanID user with the email `canderson@testuser.com`. If the emails do not match, the Slackbot will not be able to process their requests or commands.