Purpose of Integration

The integration allows Targitr to send notifications and announcements directly into a chosen Slack channel. This is specifically for:

• Reward challenge announcements

• Updates on progress

• Notifications of winners or milestones

The flow is one-way only: Targitr → Slack. Slack cannot trigger or control actions within Targitr.

Connection Overview

• Type: Outbound Webhook / Slack App integration

• Direction: One-way (from Targitr to Slack)

• Method: Targitr uses Slack’s Incoming Webhooks API or Chat.postMessage endpoint

• Scope of Access: Limited to posting messages in designated Slack channels or user DMs

Security & Authentication

• OAuth 2.0:
  Targitr will request authorisation via Slack OAuth 2.0 during setup.

• Required Scopes:

  • chat:write (to send messages to channels)

  • chat:write.public (optional, if posting to channels the app hasn’t been invited to yet)

• Token Handling:

  • Slack provides a OAuth Token after successful installation.

  • This token is securely stored by Targitr (encrypted at rest, masked in logs).

• One-Way Assurance:

  • Targitr will only use the token for outbound API calls.

  • No Slack event subscriptions or inbound listeners will be implemented.

How to Connect Targitr with Slack

1. Admin Initiates Connection in Targitr

   • Navigate to Integrations > Slack in the Targitr dashboard.

   • Click “Connect Slack”.

   • 

2. Slack OAuth Flow

   • User is redirected to Slack’s authorisation screen.

   • The admin/manager selects the workspace and grants Targitr permissions (only posting messages).

   • 

3. Token Exchange

   • Slack returns a Bot OAuth Token to Targitr.

   • Token is stored securely in Targitr’s backend (encrypted)

4. Configuration

   • Admin/manager chooses which Slack channels (or users) will receive Targitr notifications.

   • 

5. Test Connection

   • Targitr can send a test notification to confirm the setup.

Notification Types in Slack

• Challenge Announcements
  “🚀 New reward challenge is live! Book 5 meetings this week to win.”

• Progress Updates
  “⚡ Sarah just completed 3/5 meetings in the current challenge.”

• Winners / Milestones
  “🎉 Congrats to James for winning this week’s challenge!”

Messages can include Slack formatting: emojis, bold text, and even blocks for richer layouts.

Security Best Practices

• Token Security: Tokens stored in an encrypted database, rotated if compromised.

• Least Privilege: Only request chat:write scope, not unnecessary permissions.

• Workspace Restriction: Admins must explicitly approve the connection for each Slack workspace.

• Audit Logging: All outbound Slack messages from Targitr are logged for transparency.

Admin Controls

• Ability to disconnect Slack at any time from within Targitr.

• Option to limit which Targitr notifications go to Slack (e.g., only major announcements, not all updates).

End User Experience

• SDRs and AEs receive challenge-related updates directly in Slack.

• No extra authentication required for end users.

• Interaction is passive: users cannot reply in Slack to influence Targitr, ensuring the one-way rule is respected.

This structure keeps it crystal clear: Slack is just a broadcast channel for Targitr, secured with OAuth, limited to chat:write permissions, and easy to set up by managers/admins.