# Security, policy and future-state discovery questions

*Slack Consultant Study Guide · Discovery · Last updated October 21, 2026 · https://www.certifyforce.com/study-guide/slack-consultant/discovery/security-policy-and-future-state-discovery-questions*

The three areas of Slack management discovery, the security and policy questions to ask about restricted populations, SSO, guests, external collaboration and apps, and how each answer maps to a recommendation such as a custom Terms of Service, Slack Connect approval or a session duration matched to the IdP.

- Certification: Salesforce Slack Consultant
- Exam section: Discovery
- Study guide: https://www.certifyforce.com/study-guide/slack-consultant

**Official exam objective:**

> Ask thoughtful questions about existing Slack security and policies as well as desired future state.

## What the exam expects

- Classify a discovery question into the three Slack management discovery areas: governance, policies and settings, and Slack Connect.
- Ask the security and policy questions Slack recommends about restricted populations, SSO for everyone including guests, and external collaboration.
- Map a discovery finding to its initial recommendation: custom Terms of Service, Slack Connect approval by Org Owners and Org Admins, an Open social workspace, workspace-level app management or one preapproved video app.
- Recommend a Slack session duration that matches the identity provider's session policy, and explain why shorter or longer is worse.
- Key terms: **Slack management discovery** (questions about who decides, what is allowed and how external work happens); **custom Terms of Service** (terms users accept before access); **Slack Connect** (channels shared with external organizations); **session duration** (how long members stay signed in before reauthenticating); **IdP** (identity provider used for SSO).

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Discovery areas | Governance; policies and settings; Slack Connect | [Understanding Slack Management and Policy Recommendations](https://trailhead.salesforce.com/content/learn/modules/discovery-conversations-for-slack-implementations/explore-slack-management-and-settings-requirements) |
| Example questions | Restricted populations; SSO for everyone and guests; external approvals; external partner vision | [Understanding Slack Management and Policy Recommendations](https://trailhead.salesforce.com/content/learn/modules/discovery-conversations-for-slack-implementations/explore-slack-management-and-settings-requirements) |
| Sensitive info, everyone on board | Custom Terms of Service | [Understanding Slack Management and Policy Recommendations](https://trailhead.salesforce.com/content/learn/modules/discovery-conversations-for-slack-implementations/explore-slack-management-and-settings-requirements) |
| Business-related Slack Connect | Org owners and admins approve requests and manage channels | [Understanding Slack Management and Policy Recommendations](https://trailhead.salesforce.com/content/learn/modules/discovery-conversations-for-slack-implementations/explore-slack-management-and-settings-requirements) |
| App policies differ by company | Workspaces manage apps at workspace level | [Understanding Slack Management and Policy Recommendations](https://trailhead.salesforce.com/content/learn/modules/discovery-conversations-for-slack-implementations/explore-slack-management-and-settings-requirements) |
| Session duration | Match the IdP; shorter adds redirects, longer is a risk | [Maximize Access & Security](https://trailhead.salesforce.com/content/learn/modules/identity-management-in-slack/explore-access-and-security-controls) |
| Guests and SSO | Guests can optionally be required to use SSO; session and 2FA settings apply | [Maximize Access & Security](https://trailhead.salesforce.com/content/learn/modules/identity-management-in-slack/explore-access-and-security-controls) |
| Slack Connect users | Managed and authenticated by their own organization | [Maximize Access & Security](https://trailhead.salesforce.com/content/learn/modules/identity-management-in-slack/explore-access-and-security-controls) |
| App install default | All members can install apps unless owners restrict it | [Security tips](https://slack.com/help/articles/115004155306-Security-tips-to-protect-your-workspace) |

## Check yourself

- Which three areas does Slack management discovery cover?
- Why ask whether guests will use SSO?
- When app usage differs between merged companies and will keep differing, what is the initial recommendation?
- Why is a Slack session longer than the IdP's a problem?

## Sources

- [Understanding Slack Management and Policy Recommendations](https://trailhead.salesforce.com/content/learn/modules/discovery-conversations-for-slack-implementations/explore-slack-management-and-settings-requirements)
- [Maximize Access & Security in Slack](https://trailhead.salesforce.com/content/learn/modules/identity-management-in-slack/explore-access-and-security-controls)
- [Security tips to protect your workspace](https://slack.com/help/articles/115004155306-Security-tips-to-protect-your-workspace)
- [Create a Vision Statement and Define Success Metrics](https://trailhead.salesforce.com/content/learn/modules/discovery-conversations-for-slack-implementations/create-a-vision-statement-and-success-metrics)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 6 linked practice questions, and unlimited timed mock exams are included with the Slack Consultant pack (USD $19): https://www.certifyforce.com/practice-exams