Share via

Auto provisioning not working with Slack Enterprise App

Thomas McGinley 0 Reputation points
2026-02-10T16:33:35.5+00:00

I am trying to configure automatic provisioning in Slack. I am going through the Entra setup and the process is failing to authenticate. I have attached some screenshots but I can provide more information if needed. The process seems to partially complete, it installs the app in Slack and it seems to have all the necessary permissions, but I get the attached error in Entra. I dont know what actions I can take since this is a guided setup process.Screenshot 2026-02-10 092Screenshot 2026-02-10 093032.png626.png

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

1 answer

Sort by: Most helpful
  1. VEMULA SRISAI 9,345 Reputation points Microsoft External Staff Moderator
    2026-02-10T17:06:43.75+00:00

    Hi, thanks for sharing the detailed error message.

    The error returned by Slack "non_org_teams_only" with HTTP 400 BadRequest indicates that the authorization request is being sent to a Slack environment that does not support SCIM provisioning.

    Slack only enables SCIM provisioning on Enterprise Grid organizations, and this endpoint is not available for standalone workspaces. When Entra attempts to call Slack’s SCIM API (https://api.slack.com/scim/v1/...), Slack returns this error for workspaces that are not part of an Enterprise Grid org.

    Microsoft’s Slack provisioning documentation also confirms that the Slack environment must meet SCIM prerequisites for the integration to work.

    This error occurs because:

    • Your Slack workspace is likely on Free, Pro, or Business+, which do not support SCIM.
    • SCIM provisioning requires:
      • Slack Enterprise Grid subscription
        • Setup performed from the Org Admin (not workspace admin)
          • SCIM enabled at the organization level

    If any of these are missing, Slack rejects the SCIM request, resulting in the non_org_teams_only error.

    Below are the step to resolve:

    1.Verify whether your Slack environment is Enterprise Grid.

    • If it is not, then automatic provisioning from Entra cannot be enabled — this is expected behavior.
    • Only SSO will work in non‑Grid environments.

    2.If you do have Enterprise Grid, ensure the following:

    • You are logged in as an Org Owner / Org Admin, not a workspace admin.
    • SCIM is enabled under: Slack Admin → Organization Settings → User Provisioning (SCIM)
    • Generate the SCIM token from the Org Admin portal, not from a workspace.

    3.After enabling SCIM at the org level, return to Entra → Provisioning → Test Connection.

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.