Before you start
An application in your organization asks for your approval before it runs a sensitive action. Here is where the request reaches you, what to read, and what your decision does.
Where the request reaches you
The hub notifies you by email. The email links to the request page under Requests in the Web App. If you subscribed to Slack notifications, you also get a Slack direct message with the same request. The SplitSecure mobile app does not show StepAuth requests.
What to read
The request shows the name of the application, a title, a summary of what happens after an approval, and details such as the resource and the values. It also shows who started the action. When an agent started it, it shows the person the agent acts for. If the request came to you as a member of a group, it shows that group.
Decide from the text only. The application wrote it for a person who did not start the action. If the text does not tell you that the action is correct, deny it.
Approve or deny
- Approve and Deny record your decision. The decision is final.
- In Slack, Review opens the request page in the Web App.
- A request names one approver. When a group is the approver, the first member who decides closes the request. When a policy is the approver, the request can need more decisions after yours.
- A request expires at the time the application set, 30 minutes after it was sent unless the application chose otherwise. The application then does not run the action.
Subscribe in Slack
In Slack
An administrator connects the workspace first, as in Connect Slack . The email of your SplitSecure account must be the verified email of your Slack profile. Each member subscribes once in each workspace. A subscription in Slack is not active until the member confirms it in the Web App.
In a message box in Slack, enter /splitsecure subscribe.
You can also open the SplitSecure app in Slack, go to its Home tab, and click Subscribe.
If more than one SplitSecure organization uses the workspace, Slack asks which one sends you notifications. Click one organization, or All of the above.
Slack answers “Almost done - confirm in SplitSecure to start getting notifications here in” with the name of the workspace, and a Confirm in SplitSecure button.
Confirm the subscription
In the Web App
- In Slack, click Confirm in SplitSecure within 15 minutes. The Web App opens My account.
- If the Web App asks you to sign in, sign in with the account that has the email of your Slack profile.
- Under Notification subscriptions, find the row with Pending confirmation.
- Click Confirm.
The row shows Slack, the workspace, and the date you added it. The next request that names you arrives as a Slack message.
What a request looks like in Slack
In Slack
The SplitSecure app sends a direct message for each request that asks you. The message shows:
- A heading, for example “Dana Reyes is asking you to approve a request”.
- For a request that asks you as a member of a group, the name of that group.
- The title and the summary of the request.
- Under Details, the name of the app and the details of the action. Slack shows 12 detail rows or fewer.
- Three buttons: Approve, Deny and Review.
Approve and Deny record your decision directly in Slack. The app answers “Approved.” or “Denied.”. The decision is final. Review opens the request page in the Web App.
When the request is complete, the message loses its buttons and shows who approved or denied it. A request that needs more approvals keeps its buttons after your decision.
You also get an email for each request. The email links to the request page and has no Approve or Deny button.
A decision in Slack needs only the Slack account of the approver. A person who controls that Slack account can approve for the approver. Connect only workspaces with sign-in rules that you trust.
Stop the notifications
Each of these ways stops the Slack messages:
- Unsubscribe in Slack. Enter
/splitsecure unsubscribe, or click Unsubscribe on the Home tab of the app. Slack answers “You’re unsubscribed from SplitSecure notifications in” with the name of the workspace. If you have a pending subscription only, Slack cancels it. - Remove the subscription in the Web App. In the sidebar, click Account. On My account, under Notification subscriptions, click the trash icon on the row, then click Remove.
- Disconnect the workspace (administrator). On Integrations, click the workspace, then click Disconnect. Confirm with Disconnect.
Disconnect removes the subscriptions of all members in that workspace. After you connect the workspace again, each member must subscribe again. If you disconnect the default workspace, another connected workspace becomes the default.
When someone removes the SplitSecure app from the Slack workspace, SplitSecure disconnects the workspace from every organization. When a member leaves the organization, the member stops getting messages from it.
Troubleshooting
| Issue | Solution |
|---|---|
| Slack says that the workspace is not connected to an organization | No organization connected this workspaceAsk an organization administrator to connect it, in Connect the Slack workspace |
| Slack says “You need a SplitSecure account first” | No SplitSecure account has the email of your Slack profileSign in to the Web App with that email, then subscribe again |
| Slack says that your account is not a member of a connected organization | Your account is not an active member of an organization that connected this workspaceAsk an administrator to add you to the organization |
| Slack says “Your Slack profile has no email” | Your Slack profile has no verified emailAdd and verify the email of your SplitSecure account in your Slack profile, then subscribe again |
| The Web App says “This link has expired or was already used.” | More than 15 minutes passed, or you already used the linkEnter /splitsecure subscribe again |
| You subscribed, but no messages arrive | You did not confirm on My account within 15 minutesEnter /splitsecure subscribe again, then confirm |
/splitsecure does not autocomplete | Slack keeps an old list of commandsReload Slack |
| Approve answers “This request is no longer pending, or you’re not one of its approvers.” | The request is complete or expired, or it does not ask youClick Review to see the state of the request |
| Approve answers “Your chat email does not match an org member” | The email of your Slack profile is not the email of an active memberApprove on the request page in the Web App |
| You get two messages for one request | You subscribed in two workspacesUnsubscribe in the workspace you do not use |
| The message keeps its buttons after you approve | The request needs more approvalsNo action. The buttons go away at the end of the request |