User Lifecycle Management13% of the exam
IdP groups for workspace and channel membership
How Org Owners and Admins connect synced identity provider groups to workspaces and channels in an Enterprise org, what required membership changes, what happens when someone leaves the group or the group is disconnected, and why group membership is edited in the IdP.
Given a scenario, determine how to manage identity provider (IdP) groups after configuration for workspace access.
~7 min read · 5 practice questions ·
What the exam expects
- Predict what connecting an IdP group to a workspace does to members who are already in that workspace.
- Choose between required and not-required workspace membership, and predict where a person is removed when they leave the IdP group.
- Predict the effect of disconnecting an IdP group from a workspace.
- Decide whether a channel can be connected to an IdP group, and what to change when it cannot.
- Route a group membership change to the identity provider rather than to Slack.
Key terms:
- IdP group: a security group from the identity provider, synced to an Enterprise org through SCIM or the IdP's connector.
- Connected workspace: a workspace whose membership the IdP group adds and removes people from.
- Required workspace: a connected workspace where membership is mandatory for every group member.
- Connected channel: a channel the group's members are added to automatically, as default channels.
Key facts
Who connects IdP groups
- Detail
- Org Owners and Org Admins, Enterprise plans
Connecting a workspace
- Detail
- Does not affect members already in the workspace
Leaving the IdP group
- Detail
- Removes the person only from required workspaces
Disconnecting a workspace
- Detail
- Automatically removes all group members from that workspace
Required membership
- Detail
- Can be set at any time; members can't deactivate their accounts while it applies
Channel eligibility
- Detail
- Org-wide multi-workspace channel, or accessible from a required workspace; public, private or externally shared all allowed
Connected channels
- Detail
- Default channels for group members, who can leave them; up to 100 per connect
Editing group membership
- Detail
- Done in the IdP, never in Slack
Org-level user groups
- Detail
- Can't be combined with IdP groups or managed by SCIM
- Why does an employee removed from an IdP group sometimes remain in one of the group's connected workspaces?
- When can an Org Admin connect an IdP group to a private channel?
- What happens to group members when an IdP group is disconnected from a workspace?
- Where do you add a new person to an IdP group?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Slack Administrator pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 32 lessons of the Slack Administrator guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Inline practice questions and one-click topic practice (5 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Unlimited timed practice exams