Only the slack connection was fixed.
Azure Sentinel - Logic Apps - Provide Slack Webhook URL
Hi,
How can we add an Azure Sentinel Logic App - Slack integration with an webhook provided?
Authentication seems to be required by a microsoft account for validation. We don't want that.
User is authenticated in the browser for slack.
Ideally, requiring permissions from slack Administrator to post in channel.
Thanks
Azure Logic Apps
Microsoft Security | Microsoft Sentinel
2 additional answers
Sort by: Most helpful
-
nwsentinel4 201 Reputation points
2020-11-18T10:37:34.183+00:00 Hi Azure Team,
Seems you guy's have solved it for us! Thank you very much for your time and efforts!
Additionally: don't let users connect, but request to post as an webhook url and have the channel post it, instead of a user.
For now, this suffices for us, but it could be enhanced to post as channel owner.
-
nwsentinel4 201 Reputation points
2020-11-16T15:59:40.69+00:00 Integrations from soc-prime : posting an event to slack did not work.
Also the azure templates 201 slack did not work.
And other resources we've tried all asking for a valid account used by slack.