I've recently set up Slack along with Single Sign-On (SSO) and user provisioning through Entra. Overall, the provisioning process is functioning as it should, with users being created and removed, and their attributes being synchronized correctly. I have it set to run every 40 minutes, and that's fine for most users. However, I've noticed that a few users aren't syncing automatically. To get them started, I had to manually run provisioning on demand just for their initial sync. After that, they were fine—any changes I made afterwards synced up in the scheduled runs. Is this some sort of known issue? It seems odd that I need to give a manual push to certain users to get the ball rolling, but once that's done, everything works smoothly during scheduled syncs.
1 Answer
It sounds like you’re experiencing some of that typical Slack SCIM behavior. I haven’t run into this issue myself with provisioning, but there are often quirks with attributes. Sometimes, when we set them up, they either format oddly or end up allowing users to edit things manually, which leads to inconsistencies. It's frustrating, but it might just be how Slack handles some attributes.
Thanks for the tip! I’ve noticed those quirks too. I did manage to lock down some fields in Slack admin settings to stop manual edits, which helps. Just wish the initial sync was smoother for everyone!