Azure Sentinel - Logic Apps - Provide Slack Webhook URL

nwsentinel4 201 Reputation points
2020-11-16T15:57:01.953+00:00

Hi,

How can we add an Azure Sentinel Logic App - Slack integration with an webhook provided?
Authentication seems to be required by a microsoft account for validation. We don't want that.
User is authenticated in the browser for slack.
Ideally, requiring permissions from slack Administrator to post in channel.

Thanks

Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
2,868 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
989 questions
0 comments

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. nwsentinel4 201 Reputation points
    2020-11-18T10:37:34.183+00:00

    Hi Azure Team,

    Seems you guy's have solved it for us! Thank you very much for your time and efforts!

    Additionally: don't let users connect, but request to post as an webhook url and have the channel post it, instead of a user.

    For now, this suffices for us, but it could be enhanced to post as channel owner.

    1 person found this answer helpful.
    0 comments
  2. nwsentinel4 201 Reputation points
    2020-11-16T15:59:40.69+00:00

    Integrations from soc-prime : posting an event to slack did not work.
    Also the azure templates 201 slack did not work.
    And other resources we've tried all asking for a valid account used by slack.

    0 comments