# Azure Active Directory + Slack integration > Sync user identities, automate provisioning alerts, and keep your team informed in real time by integrating Azure AD with Slack. **Canonical page:** https://tray.ai/connectors/azure-active-directory-slack-integrations/ **Azure Active Directory connector:** https://tray.ai/connectors/azure-active-directory-integrations/ **Azure Active Directory documentation:** https://tray.ai/documentation/connectors/service/azure-active-directory **Slack connector:** https://tray.ai/connectors/slack-integrations/ **Slack documentation:** https://tray.ai/documentation/connectors/service/slack ## Overview Azure Active Directory controls who has access to what across your organization. Slack is where your teams communicate and get work done every day. Together, they cover a lot of ground — automating user lifecycle events, security alerts, and access notifications directly into the channels where your people already work. When Azure Active Directory and Slack run in silos, IT and security teams are stuck doing manual updates, chasing delayed notifications, and piecing together missed access events. Connecting the two cuts through that. New hires get a Slack welcome the moment their Azure AD account is provisioned. Departing employees trigger instant deactivation alerts to IT admins. Risky sign-ins and MFA failures surface in dedicated Slack channels before they turn into real incidents. With tray.ai bridging Azure AD and Slack, teams can cut response times, improve their compliance posture, and make sure the right people are notified at the right moment — without writing a single line of code. ## Use cases ### Automated User Onboarding Notifications When a new user is created in Azure Active Directory, tray.ai sends a personalized welcome message to the appropriate Slack channel or directly to the new employee's workspace. IT teams are notified at the same time so they can confirm provisioning is complete and accurate. - Cut manual onboarding communication overhead for HR and IT teams - Make sure new hires feel welcomed and informed from day one - Give IT admins real-time confirmation that accounts are properly set up ### Offboarding and Account Deactivation Alerts When a user is disabled or deleted in Azure Active Directory, tray.ai immediately posts an alert to your IT or security Slack channel. Teams can act fast on access revocation, license reclamation, and asset recovery without waiting for someone to notice. - Eliminate delays between account deactivation and team awareness - Reduce the risk of orphaned licenses and unsecured accounts - Create an auditable record of offboarding communications ### Security Risk and Sign-In Alert Escalation Azure AD Identity Protection detects risky sign-ins, leaked credentials, and suspicious behavior. Integrated with Slack, tray.ai pushes these high-priority alerts to dedicated SecOps channels in real time so your team can triage and respond fast. - Shrink mean time to respond to identity-based security threats - Centralize security alerting in the tools teams already monitor - Let on-call security engineers act within seconds of an alert ### Group and Role Change Notifications When users are added to or removed from Azure AD security groups, Microsoft 365 groups, or roles, tray.ai notifies the relevant Slack channels or stakeholders. Team leads, compliance officers, and IT managers stay on top of access changes without digging through AD logs. - Maintain continuous visibility into access control changes - Support compliance requirements with real-time audit notifications - Let team leads verify their members have the right permissions ### MFA Enrollment and Compliance Reminders For users who haven't enrolled in multi-factor authentication or have lapsed security settings in Azure AD, tray.ai triggers automated Slack direct messages reminding them to complete enrollment. If they don't act within a set window, escalations go to their manager. - Improve MFA adoption rates across the organization - Reduce security risk from non-compliant user accounts - Automate what's otherwise a tedious manual follow-up process for IT ### Slack Channel Provisioning on Group Creation When a new Azure AD group or team is created — for a new project or department — tray.ai can automatically create a matching Slack channel, set the topic, and invite the relevant members. Directory structure and communication channels stay in sync. - Eliminate the manual work of creating Slack channels for every new team - Keep Slack workspace structure aligned with your organizational directory - Speed up collaboration setup for new projects and departments ### Password Reset and Self-Service IT Alerts When a user triggers a self-service password reset or hits an account lockout in Azure AD, tray.ai sends a Slack DM to the user with guidance and notifies the IT helpdesk channel for visibility. Fewer support tickets, better user experience. - Reduce inbound helpdesk tickets related to password and access issues - Give users immediate, actionable guidance through their preferred channel - Give IT teams passive awareness without requiring manual monitoring ## Templates ### New Azure AD User → Slack Welcome Message Automatically sends a welcome Slack DM and posts to an onboarding channel whenever a new user account is created in Azure Active Directory, including details like their department, manager, and start date. Connectors used: Azure Active Directory, Slack ### Azure AD User Disabled → Slack IT Alert Triggers an immediate, structured Slack alert to the IT or security channel whenever a user account is disabled in Azure AD, including user details and a checklist prompt for offboarding tasks. Connectors used: Azure Active Directory, Slack ### Azure AD Risky Sign-In → Slack Security Channel Alert Monitors Azure AD Identity Protection for risky sign-in events and immediately posts structured alerts to a dedicated security Slack channel so SecOps can respond fast. Connectors used: Azure Active Directory, Slack ### Azure AD Group Membership Change → Slack Notification Sends a Slack notification to a channel or user whenever a member is added to or removed from a specified Azure AD group, keeping access control changes visible and auditable. Connectors used: Azure Active Directory, Slack ### MFA Non-Compliance → Slack Reminder Campaign Queries Azure AD for users who haven't registered for MFA and automatically sends personalized Slack DM reminders with enrollment instructions, escalating to managers after a configurable deadline. Connectors used: Azure Active Directory, Slack ### New Azure AD Group → Auto-Create Slack Channel and Invite Members When a new group is created in Azure Active Directory, tray.ai automatically provisions a matching Slack channel, sets a relevant channel description, and invites all current group members. Connectors used: Azure Active Directory, Slack ## Challenges Tray.ai solves ### Mapping Azure AD User Identities to Slack Users Azure AD and Slack use different unique identifiers — UPNs and email addresses on one side, Slack user IDs on the other. Without a reliable mapping layer, notifications and DMs can fail to reach the right recipients or require manual lookup every time. **How Tray.ai helps:** tray.ai's built-in data mapping and lookup capabilities automatically resolve Azure AD UPNs or email addresses to Slack user IDs at runtime, so every automated message reaches the right person without manual intervention. ### Handling Real-Time vs. Polling-Based Event Delivery Azure AD doesn't support native webhooks for every event type, so some integrations have to rely on scheduled polling rather than instant push notifications. In security alert workflows where seconds matter, that latency is a real problem. **How Tray.ai helps:** tray.ai supports both webhook-based triggers and configurable polling schedules, so you can pick the right trigger mechanism per event type and tune polling frequency to balance performance and API rate limits. ### Managing API Permissions and Scopes Securely Azure AD integrations require precise Microsoft Graph API permissions, and over-provisioning scopes creates unnecessary security risk. Slack bot tokens also need to be scoped correctly to post messages, create channels, and look up users without violating least-privilege principles. **How Tray.ai helps:** tray.ai's authentication management supports granular OAuth scopes for both Azure AD (via Microsoft Graph) and Slack, and stores credentials in an encrypted vault — making least-privilege access straightforward to configure without exposing tokens in workflow logic. ### Avoiding Notification Fatigue from High-Volume AD Events Azure Active Directory generates a lot of events in large organizations. Routine sign-ins, minor profile updates, and automated system changes can easily flood Slack channels if you're not filtering carefully. Once alert fatigue sets in, the truly critical signals get buried. **How Tray.ai helps:** tray.ai's workflow logic supports rich conditional filtering, so you can define precise criteria — risk level thresholds, specific group names, user attributes — and only meaningful, actionable events generate Slack notifications. ### Keeping Workflows Resilient Through Azure AD and Slack API Changes Both Microsoft Graph API and the Slack API evolve regularly. Endpoint changes, deprecations, and updated authentication requirements can silently break production workflows, often at the worst possible time. **How Tray.ai helps:** tray.ai maintains managed, up-to-date connectors for both Azure Active Directory and Slack, abstracting away API versioning complexity and providing monitoring and alerting so workflow failures are surfaced and resolved quickly. ## Learn more - Intelligent Integration: https://tray.ai/platform/intelligent-ipaas/ - Merlin Agent Builder: https://tray.ai/platform/merlin-agent-builder/ - Agent Gateway for MCP: https://tray.ai/platform/agent-gateway/ - Book a demo: https://tray.ai/contact/