Sign in with Slack

How to register Curupira with Slack ("Sign in with Slack") so your tenant's users can sign in with their Slack account. Curupira verifies the id_token, so Slack logins are as trustworthy as Google's.

Portal: api.slack.com/apps → Create New App → From scratch.

Curupira detail	Value
Type	OpenID Connect (signed id_token, verified)
Callback URL to register	https://auth.curupira.api.br/sso/slack/callback
Default scopes	openid profile email

1 · Create the app

1. Create New App → From scratch — name it and pick a workspace to develop in.
2. In the left nav open OpenID Connect (under "Features") and enable Sign in with Slack.
3. Add the Redirect URL exactly: https://auth.curupira.api.br/sso/slack/callback
4. Under Scopes, request openid, profile, and email (so Curupira receives a verified address).
5. From Basic Information → App Credentials, copy the Client ID and Client Secret.

2 · Add the connection in Curupira

In the admin dashboard → SSO Connections, choose your tenant and Add SSO Connection:

• Provider: Slack
• Client ID / Client Secret: from step 1 (the secret is stored encrypted and never shown again)
• Scopes: leave blank to use the defaults (openid profile email)
• Enabled: on

Then test at https://auth.curupira.api.br/sso/slack/authorize?tenant=<your-tenant-slug>.

:::info Email is required Request the email scope so Slack returns a verified address in the id_token — Curupira won't provision or link an account without a verified email. :::

:::note Account linking If Slack returns an email that matches an existing password account, sign-in is refused — sign in with your password first, then connect SSO from your account settings. A brand-new email creates an SSO-only user automatically. :::

Checklist

• App created from scratch in your workspace
• Sign in with Slack (OpenID Connect) enabled
• Redirect https://auth.curupira.api.br/sso/slack/callback added (exact)
• Scopes openid profile email requested
• Client ID + Client Secret entered in SSO Connections