Slack Webhooks

Send Keeper Advanced Reporting & Alert notifications to Slack

Slack Setup and Integration

Using the webhook feature, you can send custom alerts and actions to your Slack channel following the steps below.

Example Slack Notification

(1) Go to https://api.slack.com/apps and Create New App.

Create New App

(2) Name the App, select your desired Workspace and click Create App.

Create App

(3) Click on Incoming Webhooks.

(4) Activate the Webhook and click "Add New Webhook" to Workspace.

Activate Webhook

(5) Select the Slack channel you would like the alerts to be sent. Then click "Copy" to paste the Webhook URL required to enter into the Admin Console interface in the following steps.

Copy the Webhook URL

(6) In the "Basic Information" section on the left, you can populate the icon with the Keeper icon. Right-click and save the image. Use the link below to download a 512x512 PNG icon for Keeper: https://keeper-email-images.s3.amazonaws.com/common/Keeper_512x512.png

(7) Login to the Keeper Admin Console and visit Reporting & Alerts > Alerts and create a new alert. After selecting the desired event types and attributes, click on "Add Recipient". The example below shows all Policy Changes selected.

Add Alert

Select Event Types and Attributes

Add Recipient (Slack)

(8) Enter the Name and Email address to receive the event, and click Add Webhook.

Add Webhook

(9) Paste the Webhook URL from Step 5 and paste the HTTP body content below.

(10) Copy the JSON below into the HTTP Body section.

{
  "text": "Keeper Security Event",
  "blocks": [
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*Alert Name*\n#alert_name"
        }
      ]
    },
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*Event Details*\n#description"
        }
      ]
    },
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*IP Address*\n#remote_address"
        },
        {
          "type": "mrkdwn",
          "text": "*Timestamp*\n#timestamp"
        }
      ]
    },
    {
      "type": "actions",
      "elements": [
        {
          "type": "button",
          "text": {
            "type": "plain_text",
            "text": "Vault Login",
            "emoji": true
          },
          "value": "vault",
          "url": "https://keepersecurity.com/vault",
          "action_id": "actionId-1"
        },
        {
          "type": "button",
          "text": {
            "type": "plain_text",
            "text": "Console Login",
            "emoji": true
          },
          "value": "console",
          "url": "https://keepersecurity.com/console",
          "action_id": "actionId-2"
        }
      ]
    }
  ]
}

HTTP Body

(11) Click Save on the recipient and Save the alert.

Add Webhook

Save Alert

Setup Complete

Modify the HTTP Body according to your preferences. Slack's Block Kit Builder allows you to customize the look completely.

Creating new Webhook body content and editing content may take up to 15 minutes to take effect.

Shared Record Notifications

Another use case is to be notified when a record is added to a particular Shared Folder.

Example Shared Record Notification

(1) Follow the Slack setup steps above to create a baseline Slack integration.

(2) In the Web Vault, copy the Shared Folder UID that you would like to report on.

Shared Folder UID

(3) On the Admin Console, create a new Alert for the event "Add Record to Shared Folder"

Alert on Record Added to Shared Folder

(4) Under the Attributes section, paste the Shared Folder UID.

Add Shared Folder UID

(5) Under "Recipients", create a new Webhook recipient.

(6) Copy and paste the below JSON text body into the HTTP Body section. In the "text" field, you will want to edit it to match up with the alert that you are creating.

{
  "text": "Keeper - Added Record to Shared Folder",
  "blocks": [
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*Alert Name*\n#alert_name"
        }
      ]
    },
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*Event Details*\n#description"
        }
      ]
    },
    {
      "type": "section",
      "fields": [
        {
          "type": "mrkdwn",
          "text": "*IP Address*\n#remote_address"
        },
        {
          "type": "mrkdwn",
          "text": "*Timestamp*\n#timestamp"
        },
        {
          "type": "mrkdwn",
          "text": "*Record UID*\n#record_uid"
        }
      ]
    },
    {
      "type": "actions",
      "elements": [
        {
          "type": "button",
          "text": {
            "type": "plain_text",
            "text": "Open Record",
            "emoji": true
          },
          "value": "vault",
          "url": "https://keepersecurity.com/vault/#detail/#record_uid",
          "action_id": "actionId-1"
        },
        {
          "type": "button",
          "text": {
            "type": "plain_text",
            "text": "Console Login",
            "emoji": true
          },
          "value": "console",
          "url": "https://keepersecurity.com/console",
          "action_id": "actionId-2"
        }
      ]
    }
  ]
}