Configure Slack chat connector for major security incidents › Configure › Major Security Incident Management › Security Incident Response › Enterprise security case management applications › Security Operations

Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Activate Slack as a channel provider

Activate Slack by validating the Slack connection.

Before you begin

Role required:

sn_msi.workspace_admin - Write
sn_msi.chat_collab_provider - Read

Once the connection is activated and validated, an information message is displayed that the Provider connection is validated successfully. You can modify the channel configuration by adding and removing users, and possibly adding more channels or renaming existing channels.

Procedure

Navigate to All > Major Security Incident Management > Chat Channel > Chat Provider Configuration.
Select Slack to open the Slack chat provider configuration.

Image omitted: msim-provider-config-slack.png
Slack Chat Provider Configuration

Select Download Slack manifest to download the slack_manifest.json file.

The slack_manifest.json file contains the complete configuration for the Slack setup and enables you to configure Slack automatically. You need to upload this JSON file into the Slack configuration.

Open the slack_manifest.json file, and perform the following steps:

Go to the api.slack.com/apps URL on your web browser.
Select Create New App action.
In the Create an app pop-up, choose the From an app manifest option.
In the Pick a workspace to develop your app pop-up, choose a workspace from the list and select Next.

For example, MSIM Slack Workspace.
In the Enter app manifest below pop-up, select the JSON tab, and copy paste the code from the slack_manifest.json file.
Select Next.
In the Review summary & create your app pop-up, select Create.

Now your app has been created.
In the Basic Information page, select Install to Workspace.

The Slack integration bot requests your permission to access the MSIM Slack Workspace.
Select Allow.
In the App Credentials section, fill in the details by navigating back to the ServiceNow instance.
Select All > Slack Configurations.

You need the sn_msi.workspace_admin role for this action.
Select a Signing Secret property.
Copy the Signing Secret and paste it in the App Credentials section of Slack.
In the ServiceNow instance, navigate to All > Flow Designer.
Navigate to Connections > Slack > View Details > Configure.

On the form, fill the fields.

Field	Description
Connection Name	Name of this connection. For example, Slack.
Connection URL	URL of this connection. For example, https://slack.com
Credential Name	Name of the credentials. For example, Slack credentials.
OAuth Name	Name of the OAuth. For example, Slack OAuth.
OAuth Client ID	The Client ID that was generated for the account that you created in Slack.
OAuth Client Secret	The Client secret for the account that you created in Slack.
OAuth Redirect URL	OAuth redirect instance name. For example, msimslack.service-now.com/oauth_redirect.do

Select Configure and Get OAuth Token.

The Slack integration bot requests your permission to access the MSIM Slack Workspace.
Select Allow.

The OAuth Access token is available and will expire on <YYYY-MM-DD> <HH:MM:SS>.

Navigate to All > Major Security Incident Management > Chat Channel > Chat Provider Configuration.
Select the Active check box to activate the Chat Provider record.
Select Validate Connection to test the connection.

A confirmation message displays that the Provider connection is validated successfully.
Right-click the record and select Save.

After that the connection between Slack and ServiceNow AI Platform instance is successfully established.
Navigate to api.slack.com/apps > Features > OAuth & Permissions.
1. Verify if all the scopes are correct.
2. Navigate to Features > Event Subscriptions.
3. In the Request URL field, select Retry.
  
  You can see a verified message.
4. Select Save.

Parent Topic:Configure Slack chat connector for major security incidents