Azure Sentinel - Logic Apps - Provide Slack Webhook URL

nwsentinel4 201 Reputation points
2020-11-16T15:57:01.953+00:00

Hi,

How can we add an Azure Sentinel Logic App - Slack integration with an webhook provided?
Authentication seems to be required by a microsoft account for validation. We don't want that.
User is authenticated in the browser for slack.
Ideally, requiring permissions from slack Administrator to post in channel.

Thanks

Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
3,059 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,100 questions
0 comments No comments
{count} votes

Accepted answer
  1. nwsentinel4 201 Reputation points
    2020-11-18T13:21:23.607+00:00

    Only the slack connection was fixed.

    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. nwsentinel4 201 Reputation points
    2020-11-18T10:37:34.183+00:00

    Hi Azure Team,

    Seems you guy's have solved it for us! Thank you very much for your time and efforts!

    Additionally: don't let users connect, but request to post as an webhook url and have the channel post it, instead of a user.

    For now, this suffices for us, but it could be enhanced to post as channel owner.

    1 person found this answer helpful.
    0 comments No comments

  2. nwsentinel4 201 Reputation points
    2020-11-16T15:59:40.69+00:00

    Integrations from soc-prime : posting an event to slack did not work.
    Also the azure templates 201 slack did not work.
    And other resources we've tried all asking for a valid account used by slack.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.