Slack•v1.0.0•3 min read

Slack Integration: Administrator Setup & Provisioning Guide

Configure, deploy, and verify the Valstorm Slack integration using App Manifests, OAuth token rotation, and webhook event subscriptions.

This guide provides step-by-step instructions for system administrators to configure, deploy, and verify the Slack integration for Valstorm.

1. Prerequisites

Before starting, ensure you have:

Administrator or Workspace Owner privileges in your target Slack workspace or Enterprise Grid organization.
Administrative access to your Valstorm deployment environment (to configure environment variables or secrets).
A public URL (or tunnel like ngrok for local development) pointing to your Valstorm API instance.

Step 1: Create the Slack App via App Manifest

Navigate to the Slack Developer Apps Console.
Click Create New App → From an app manifest.
Select your development or organization workspace and click Next.
Paste the following production manifest configuration:

YAML

display_information:
  name: Valstorm
  description: Autonomous AI CRM & Automation Platform for Slack
  background_color: "#1e293b"
features:
  bot_user:
    display_name: Valstorm Bot
    always_online: true
oauth_config:
  redirect_urls:
    - https://api.valstorm.com/v1/slack/auth/callback
    - https://api.valstorm.com/v1/slack/oidc/callback
  scopes:
    bot:
      - chat:write
      - chat:write.public
      - channels:read
      - channels:history
      - channels:join
      - groups:read
      - groups:history
      - im:read
      - im:write
      - im:history
      - mpim:history
      - users:read
      - users:read.email
      - app_mentions:read
      - reactions:read
      - reactions:write
      - files:read
      - files:write
    user:
      - chat:write
      - channels:history
      - search:read
settings:
  org_deploy_enabled: true
  token_rotation_enabled: true
  event_subscriptions:
    request_url: https://api.valstorm.com/v1/slack/events
    bot_events:
      - app_uninstalled
      - tokens_revoked
      - app_mention
      - message.channels
      - message.im

Review the summary and click Create.

Step 2: Configure App Credentials & Token Rotation

In the Slack App dashboard, navigate to Settings → Basic Information → App Credentials.
Copy the following three values:

Client ID (e.g. 1234567890.1234567890)
Client Secret (e.g. 9876543210fedcba9876543210fedcba)
Signing Secret (e.g. a8f93bc1e57c4b0ea9d8329bfa112233)

Navigate to Features → OAuth & Permissions:

Under Token Rotation, ensure the toggle for "Rotate access tokens automatically" is ON (access tokens expire after 12 hours).

Step 3: Verify Webhook Subscriptions (Events API)

In the Slack App dashboard, go to Features → Event Subscriptions.
Set the Request URL to:

   https://api.valstorm.com/v1/slack/events

Slack will immediately dispatch an HTTP POST request containing a url_verification challenge payload with an HMAC-SHA256 signature.
The Valstorm API endpoint will verify the signature using SLACK_SIGNING_SECRET and return the challenge response.
A green "Verified" indicator will appear next to the Request URL.
Click Save Changes at the bottom of the page.

Step 4: Install App to Workspace

In the Slack App dashboard, navigate to Settings → Install App.
Click Install to Workspace and approve the permissions.
Your bot user (@Valstorm Bot) is now provisioned and ready in your Slack workspace.