
Slack checks the email address, and if there’s a match, redirects to the SSO login page and creates a SAML request. When a user logs in via SAML-based SSO, several things happen that use the NameID and email address. A valid, unique email address must also be provided. The IdP assigns it to distinguish each user account. NameID is a unique, pseudo-random string that should not change for the user over time. Additionally, setting up SCIM based pre-provisioning requires the IdP to provide a Username. In the previous unit, you learned that Slack requires two SAML attributes from the IdP to configure SSO-NameID and Email. Understand How Slack Identifies Users with SAML
Recommend additional access and security controls based on company needs.
Describe available provisioning options. Describe how Slack manages display information.
After completing this unit, you’ll be able to: