[metadata]
description: Authentication is a critical part of the development process, but it doesn’t have to be daunting. With the right tools and best practices, you’ll have a secure, smooth authentication flow. Whether you’re handling OAuth 2.0, verifying requests, or setting up Sign in with Slack, we’ve got you covered.
docsearch:docusaurus_tag: docs-default-current
docsearch:language: en
docsearch:version: current
docusaurus_locale: en
docusaurus_tag: docs-default-current
docusaurus_version: current
generator: Docusaurus v3.10.2
google-site-verification: d1jXBEojz0KFbjvsojJJ77KWTOf_8sIb3T32nAQY0ak
og:description: Authentication is a critical part of the development process, but it doesn’t have to be daunting. With the right tools and best practices, you’ll have a secure, smooth authentication flow. Whether you’re handling OAuth 2.0, verifying requests, or setting up Sign in with Slack, we’ve got you covered.
og:locale: en
og:title: Authentication overview | Slack Developer Docs
og:url: https://docs.slack.dev/authentication/
twitter:card: summary_large_image
viewport: width=device-width, initial-scale=1.0

[canonical-links]
https://docs.slack.dev/authentication/

[document-links]
/
AI in Slack: /ai/
APIs: /apis/
Admin resources: /admins/
All learning resources: https://slack.dev/learn
All tools: /tools/
App management: /app-management/
App manifests: /app-manifests/
Authentication: /authentication/
Authorizing with Postman: /authentication/authorizing-with-postman
Binding accounts across services: /authentication/binding-accounts-across-services
Block Kit Builder: https://app.slack.com/block-kit-builder/
Block Kit: /block-kit/
Blog: https://slack.dev/blog
Bolt frameworks: /tools/#bolt
Changelog: /changelog
Changelog: https://docs.slack.dev/changelog
Code samples & tutorials: /samples/
Dev Program: https://api.slack.com/developer-program
Developer newsletter: https://slack.dev/newsletter
Developer program: https://api.slack.com/developer-program
Docs: /
Enterprise Search for apps: /enterprise-search/
Enterprise: /enterprise/
GovSlack: /govslack
Guides: /
Installing with OAuth: /authentication/installing-with-oauth
Interactivity: /interactivity/
LLM? Read llms.txt: https://docs.slack.dev/llms.txt
Learning paths: https://slack.dev/learning-paths/
Legacy: /legacy/
MANAGE APPS: https://api.slack.com/apps
Messaging: /messaging/
Next Overview: /authentication/
OAuth 2.0: /authentication/installing-with-oauth
Overview: /authentication/
Previous Using the Slack SCIM API: /admins/scim-api
Privacy: https://slack.com/trust/privacy/privacy-policy
Quickstart: /quickstart
Reference: /reference
Resource library: https://slack.dev/resource-library
Resources: /developer-support
Samples: /samples
Scopes and Permissions: /reference/scopes
Security best practices: /concepts/security
Sign in with Slack: /authentication/sign-in-with-slack/
Slack CLI: /tools/slack-cli/
Slack Marketplace: /slack-marketplace/
Slack SDKs: /tools/#sdks
Slack certifications: https://trailheadacademy.salesforce.com/all-offerings#f-assetType=Certification&f-products=Slack&f-siteLanguage=en_US
Slack community: https://slack.dev/community
Slack events: https://slack.dev/events
Slack marketplace: https://slack.com/marketplace
Slack platform concepts: /concepts/overview
Status: https://slack-status.com/
Support: https://docs.slack.dev/developer-support
Surfaces: /surfaces/
Terms: https://slack.com/terms-of-service/api
Tokens: /authentication/tokens
Tools: /tools
Trailhead: https://trailhead.salesforce.com/
Using PKCE: /authentication/using-pkce
Using token rotation: /authentication/using-token-rotation
Verifying requests from Slack: /authentication/verifying-requests-from-slack
Welcome!: /
Workflows: /workflows/
Workshops: https://slack.dev/workshops
Your Privacy Choices: https://www.salesforce.com/form/other/privacy-request/
Your apps: https://api.slack.com/apps
https://bsky.app/profile/slack.dev
https://www.linkedin.com/company/tiny-spec-inc/
https://www.youtube.com/channel/UCY3YECgeBcLCzIrFLP4gblw
scopes: /reference/scopes
tokens: /authentication/tokens
verifying requests: /authentication/verifying-requests-from-slack
日本語版ページ: /ja-jp/

[structured-data]
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","item":"https://docs.slack.dev/authentication/","name":"Authentication","position":1}]}

[content]
Authentication overview | Slack Developer Docs
guide
Skip to main content
Guides
Reference
Samples
Tools
Changelog
Dev Program
MANAGE APPS
Welcome!
Quickstart
Resources
Slack platform concepts
AI in Slack
APIs
App management
App manifests
Admin resources
Authentication
Overview
Tokens
Installing with OAuth
Using token rotation
Using PKCE
Verifying requests from Slack
Authorizing with Postman
Binding accounts across services
Sign in with Slack
Block Kit
Enterprise
Enterprise Search for apps
GovSlack
Interactivity
Messaging
Slack Marketplace
Surfaces
Workflows
Legacy
日本語版ページ
Authentication
On this page
Authentication overview
Authentication is a critical part of the development process, but it doesn’t have to be daunting. With the right tools and best practices, you’ll have a secure, smooth authentication flow. Whether you’re handling
OAuth 2.0
,
verifying requests
, or setting up
Sign in with Slack
, we’ve got you covered.
Authentication basics
​
Before your app can access Slack data or interact with Slack workspaces, it must go through an authentication process. This involves obtaining the necessary tokens and permissions for your app to function properly. Slack apps use OAuth
scopes
to govern what they can access. These are added in the app settings when building an app. You will attach these scopes to your tokens. Check out
tokens
to learn more. You can rotate those tokens too! Find out how on the
Using token rotation
page.
Key concepts
​
OAuth 2.0
: Learn how to use OAuth 2.0 to securely authenticate users and request access tokens.
Tokens
: Understand the different types of tokens your app can use (user tokens, bot tokens, and app tokens) and how to manage them, as well as employ token rotation and expiry to keep things fresh.
Security best practices
: Learn about security practices for managing authentication, such as validating tokens, handling sensitive data, and protecting your app from unauthorized access.
Reference
​
Scopes and Permissions
: Find the right permissions for your app to ensure access is limited to only the necessary data.
Previous
Using the Slack SCIM API
Next
Overview
Copy as markdown
Authentication basics
Key concepts
Reference
.
Tools
Slack CLI
Bolt frameworks
Slack SDKs
Block Kit Builder
Developer program
Code samples & tutorials
LLM? Read llms.txt
All tools
Learn
Learning paths
Workshops
Slack certifications
Trailhead
Resource library
All learning resources
Community
Slack community
Slack events
Resources
Docs
Blog
Slack marketplace
Developer newsletter
Manage Apps
Your apps
Status
Privacy
Terms
Cookie Preferences
Support
Changelog
Your Privacy Choices
© 2026 Slack Technologies, LLC, a Salesforce company. All rights reserved. Various trademarks held by their respective owners.
