Step 1: Remove SSO configuration

1. Click your workspace name in the sidebar.
   
2. Hover over Tools & settings, then click Workspace settings.
3. Click the Authentication tab.
4. Select Turn off SSO.
5. Click Turn off and choose whether or not to send an email to your team to let them know SSO has been turned off. Any members already logged in to Slack at the time will remain logged in.

Step 2: Set up your new SSO configuration 

1. Click your workspace name in the sidebar.
   
2. Hover over Tools & settings, then click Workspace settings.
3. Click the Authentication tab.
4. Select Configure next to SAML authentication.
5. Next to SAML SSO URL, enter your SAML 2.0 endpoint URL (HTTP). (This came from setting up your connector. If Okta is your identity provider (IDP), you can include the IDP URL if you like.)
6. Enter your IdP entity ID next to Identity provider issuer.
7. Copy the entire x.509 certificate from your identity provider and paste it into the Public certificate field.
8. Click Expand next to Advanced options. Choose how the SAML response from your IDP is signed. If you need an end-to-end encryption key, tick the box next to SignAuthnRequest to show the certificate.
9. Under Settings, decide if members can edit their profile information (like their email or display name) after SSO is enabled. You can also choose whether SSO is required, partially required* or optional.
10. Under Customise, enter a Sign-in button label.
11. Select Save configuration to finish.

*If you have guest accounts, we recommend choosing the option where SSO is partially required, so guests can still sign in to the workspaces that they have access to.

Once finished, members will receive an email asking them to connect their existing Slack account with their profile in your updated IDP. Members need to click on the SSO binding email within 72 hours, but admins can resend these emails from the Manage members page.

1. Click your organisation name in the sidebar.
   
2. Hover over Tools & settings, then click Organisation settings.
3. Click   Security in the left column, then SSO settings.
4. Select Edit in the top right.
5. Replace the SAML 2.0 endpoint URL with the new value provided by your identity provider when you set up the connector.
6. Replace your Identity provider issuer URL.
7. Replace the Service provider issuer URL if this has been set in your IDP. This value is set to https://slack.com by default.
8. Copy the entire x.509 certificate from your identity provider and paste it into the Public certificate field.
9. Select whether the SAML responses and assertions are signed. You can also change your preference for AuthnContextClassRef values.
10. Click Test configuration. We'll let you know if the changes are successful or whether you need to make further changes.
11. Once you’re ready, click Confirm update.