In this guide, you’ll learn how to integrate Slack with SecurityCoach. You can use Slack to send real-time coaching notifications to your users when risky activity is detected on their devices.

For general information about SecurityCoach, see our SecurityCoach Product Manual.

Adding SecurityCoach to Slack

Before you can begin coaching your users in Slack, you must add SecurityCoach to your Slack workspace. To add SecurityCoach to Slack, follow the steps below:

1. Log in to your KSAT console.
2. Navigate to SecurityCoach > Setup.

3. From the menu on the left side of the page, select Delivery Setup, then select Slack.

   

4. Select + Add to Slack to open the Slack OAuth screen.

   

5. Select Allow to grant SecurityCoach the needed permissions to view information and perform actions in Slack.

   

   The following Slack permission scopes are needed for the integration with SecurityCoach:

   • "chat:write"
   • "team:read"
   • "users:read"
   • "users:read.email”
   • "links.embed:write"
   • “links:write"
   • "links:read"

6. Verify that the bot is deployed by logging in to your Slack account and navigating to the Home tab > Apps subtab. KB4-SecurityAwareness should be displayed under Apps.

   

Renaming the Bot in Slack

To rename the KB4-SecurityAwareness bot in Slack, follow these steps:

1. Log in to your Slack admin account.
2. Navigate to Apps > KB4-SecurityAwareness.

3. Select the three dots icon on the top-right corner of the screen to open a drop-down menu. From the menu, Open App Details. A KB4-SecurityAwareness pop-up window will appear.

   

4. In the KB4-SecurityAwareness pop-up window, select Configuration. A KB4-SecurityAwareness details page will open.

5. In the KB4-SecurityAwareness details page, navigate to the Configuration subtab > Bots section and select Edit. An Edit bot name pop-up window will appear.

   

6. Enter your preferred bot name and select Save changes to confirm.

Syncing Slack Users with SecurityCoach

After you add SecurityCoach to Slack, your Slack team members will automatically be synced with SecurityCoach. The initial sync may take a few minutes to complete. After the initial sync, your Slack team members will be synced with SecurityCoach on a daily basis.

You can also manually sync users for each Slack Workspace by using the Run User Sync button.

Sending Real-Time Coaching Notifications Using Slack

To coach your users in Slack, we recommend setting up a real-time coaching campaign. For more information, see our Real-Time Coaching Campaigns Guide.

Deleting a Slack Workspace Integration

To delete a Slack workspace integration from your SecurityCoach console, follow the steps below:

1. Log in to your KSAT console and navigate to SecurityCoach > Setup.

2. From the menu on the left side of the page, select Delivery Setup, then click Slack.

   

3. Click the Delete button for the workspace that you want to delete.

   

4. Confirm that you want to delete the workspace.

   Note:Deleting the Slack workspace will automatically revoke the authentication token for SecurityCoach.