Slack

What it covers

Member 2FA + admin count (monitor); failure alerts (webhook).

Credential to create

Slack app bot token (xoxb-...)

Create a Slack app

Permissions to grant

• users:read (lists members and their 2FA status)

Setup steps

1. Create a Slack app in your workspace, add the users:read bot token scope under OAuth & Permissions, and install it.
2. Paste the Bot User OAuth Token (xoxb-...).
3. Optional: add an Incoming Webhook URL to receive failure alerts (this is for notifications, not evidence collection).

Notes and gotchas

• The per-member 2FA field is only returned to an admin/owner token on a paid workspace. A non-admin token makes everyone read as 'no 2FA' and the control fails, so install the app as an admin.