# What are custom OAuth profiles?

Custom OAuth profiles allow your Slack apps to leverage the Workato Slack connector under the hood. You can fully customize your Slack app's identity, i.e.:

Branding (bot name, bot logos, background color)
Permissions

# When would I need custom OAuth profiles for Slack

You want multiple apps that each perform workspace orchestration as part of their automations, for example, creating/archiving conversations. For example, an EscalationBot could create a private conversation, invite crisis management team members, and archive it once the issue is resolved. At the same time, BirthdayBot could perform the same actions – create a private conversation, invite the party planners, and archive it once the birthday is over – but for vastly different purposes.
You want control over your app's branding & appearance

You want control over your bot's permissions. The minimum permissions for optimal use are listed in the table below.

Token type	Scope	Reason
Bot	None	No bot scopes required.
User	`channels:read`	Retrieves list of public conversations.
	`channels:write`	Create/update public conversations.
	`groups:read`	Retrieves list of private conversations.
	`groups:write`	Create/update private conversations.
	`im:read`	Retrieves list of direct message conversations.
	`im:write`	Create/update direct message conversations.
	`mpim:write`	Create/update multi-party group conversations.
	`mpim:read`	Retrieves list of multi-party group conversations.
	`chat:write`	Post messages as user.
	`users:read`	Get user info.
	`users:read.email`	Get user info by email.

Migration to granular scopes

Slack released granular permissions (opens new window) on 22 January 2020. You may have to migrate any pre-existing custom Slack apps you have connected to Workato. See the migration guide for more details.

# Setup requirements

To create a custom OAuth profile, you'll need access to Custom OAuth profiles (opens new window) in Workato. If you are using the EU datacenter, click here (opens new window) instead.

If you don't see the Custom OAuth profiles (opens new window) option, make sure your Workato team or account has access.

# Creating a custom OAuth profile

# Step 1: Choose Slack

Before getting started, [sign in to your Slack workspace[(https://slack.com/signin#/signin (opens new window)) from your browser.

Navigate to Tools > Custom OAuth profiles in Workato. You'll need access to Custom OAuth profiles (opens new window) in Workato. If you are using the EU datacenter, click here (opens new window) instead.

If you don't see the Custom OAuth profiles (opens new window) option, make sure your Workato team or account has access.

Click New custom profile.

On the New custom profile page:

In Step 1, select Slack.
In Step 2, provide a name for your new app, then click Create new app. This will open a new tab that brings you to https://api.slack.com/apps (opens new window). Keep both the Workato tab and this new tab open - you'll need both to complete the remaining steps.

# Step 2: Create a new Slack app

In the new tab, select a workplace to develop the app in, then click Next.

Click Create.

In the "Welcome to your app's configurations" pop-up, click Got It.

Navigate to your app's Basic Information page. Scroll down to App Credentials, you will need the information here to complete the next step.

# Step 3: Configure Workato to talk to your Slack app

Head back to the Workato tab to complete Step 3.

In Step 3, fill in the following:

Client ID: Paste the Client ID value from Slack into this field.
Client secret: Paste the Client secret value from Slack into this field.
Verification token: Paste the Verification Token value from Slack into this field.

Click Save when you're finished.

# Step 4: Complete the connection in Workato

You're almost there! All that's left is to complete the connection in Workato.

In the open Workato tab, click Done. Go to any project folder to create a new Slack connection.

Provide a name for your Slack connection. In the Custom OAuth profile field, select the newly created OAuth profile. Click Connect.

In the permissions grant, click Allow.