Slack

Trustle reads the members of your Slack workspace and matches each one to a Trustle user by email. Trustle changes no Slack members or channels. The Trustle app sends access requests, approvals, and notifications in Slack.

Prerequisites

• Permission to install apps in the Slack workspace, for example the workspace admin role.
• A Trustle account with the admin role, with the same email as your Slack account. Trustle uses that email to find your organization.
• An identity provider connected in Trustle, for example Okta or Microsoft Entra ID. Trustle hides Communications until one is connected.
• One Slack workspace for each Trustle organization. Trustle refuses a second workspace.

Configure Slack

Step 1: Check your Slack email

1. In Slack, open your profile. Note the email address.
2. In Trustle, check that a user with the same email exists, is active, and has the admin role.
3. Check that no other Trustle organization has an active user with that email.

If one of these checks fails, the install succeeds in Slack, but Trustle never records the workspace.

Step 2: Grant permissions

Slack shows these permissions on its install screen. The app needs all of them.

Permission	Required	What Trustle does with it
users:read	Yes	Imports the members of the workspace.
users:read.email	Yes	Reads each member’s email, to match the member to a Trustle user.
team:read	Yes	Reads the workspace name.
commands	Yes	Adds the /trustle command.
chat:write	Yes	Sends access requests, approvals, and notifications.
chat:write.public	Yes	Posts in public channels that the app is not a member of.
im:write	Yes	Opens a direct message with a person.
channels:read	Yes	Reads the list of public channels.
app_mentions:read	Yes	Receives messages that mention @Trustle.
channels:history, groups:history, im:history, mpim:history	Yes	Reads messages in conversations that the app is a member of.

Connect in Trustle

1. In Trustle, go to Connections.
2. Under Communications, find Slack and click Connect.
3. Click Add to Slack. Slack opens in a new tab.
4. In Slack, select the workspace. Review the permissions. Click Allow.
5. Slack returns you to Trustle. The connection shows as connected.

Note

Install the app while you are signed in to Slack with the email of your Trustle admin account. Trustle uses that email to find your organization. Slack can show “This app is not approved by Slack.” This is expected: the Trustle app is not listed in the Slack App Directory.

People do not need to connect their own Slack accounts. After each sync, Trustle matches Slack members to Trustle users by email. To link a person whose emails differ, open the Slack connection. On the Users tab, link the Slack member to the Trustle user. Trustle keeps a link that you make by hand on every sync.

Verify

1. On the Connections page, open the Slack connection.
2. Wait for the first sync to finish.
3. On the Users tab, check that the member count matches the workspace, and that members show the Trustle user they belong to.
4. In Slack, run /trustle help. Check that the app replies with the list of commands.

The app has these commands:

Command	What it does
/trustle help	Shows the commands.
/trustle access-requests create	Opens a form to request access.
/trustle access-requests list mine	Lists your access requests.
/trustle access-requests list action	Lists the access requests that wait for your approval.

You can also click Create Access Request on the app’s Home tab. In the form, select the integration and the entitlement, enter a Reason and a Duration, and click Submit Request.

The app sends direct messages:

• Approvers get each new request, with Approve and Deny buttons.
• Requesters get a message when Trustle denies a request, grants access, or ends access because a linked work item closed.
• People get a reminder before their access expires. An admin sets when Trustle sends reminders.

If Trustle cannot reach a person in Slack or Microsoft Teams, it sends email instead.

If something is missing, see Troubleshooting.

Security notes

Note

• The app reads messages only in conversations that it is a member of.
• A request made in Slack follows the same approval policies as a request made in Trustle.
• A link that you make by hand on the Users tab overrides the email match, and Trustle never changes it. If a link is wrong, unlink it.
• To remove the app, uninstall it from the workspace in Slack. Trustle then sends notifications by email.

Troubleshooting

The install does not finish

Slack shows the app as installed, but Trustle does not show Slack as connected. Check these values:

• No match: no active Trustle user has your Slack email. The match ignores case, but nothing else.
• More than one match: your email belongs to active users in more than one Trustle organization. Install with a Slack account whose email is in one organization only.
• Not an admin: your Trustle user does not have the admin role.
• Another workspace: your Trustle organization is already bound to a different Slack workspace.

Fix the cause. Then click Add to Slack again. A second install of the same workspace is safe.

A person sees “Trustle doesn’t have a Slack account linked to you”

The person’s Slack email does not match their Trustle email, or the first sync has not finished. Open the Slack connection. On the Users tab, link the Slack member to the Trustle user.

A person sees “Your Trustle account hasn’t been activated yet”

The person has never signed in to Trustle. Ask them to sign in to Trustle once. Then they can use the app.

Approvers get email instead of Slack messages

Trustle sends email when it cannot reach a person in Slack. Check the Users tab: the person’s Slack member must be linked to their Trustle user, and must still be in the workspace.

None of these fixes work

Email support@trustle.com. Include the error message, the connection name, and the Slack workspace name. Never send a secret, key, or token.