Skip to main content

Connect an account

You connect an integration once per identity that needs it, name each credential for its environment, and let agents and flows act through it. An integration's page is one screen: three tiles across the top say what is on (Tools enabled), whose account it runs as (Acts as), and who leans on it (Used by); beneath them sit its tools, its accounts, its setup instructions, and its usage.

Slack's integration page acting as the Customer Support team account: the Tools enabled, Acts as and Used by tiles, the tool list, the OAuth app in use, and the provider's setup instructionsSlack's integration page acting as the Customer Support team account: the Tools enabled, Acts as and Used by tiles, the tool list, the OAuth app in use, and the provider's setup instructions

Pick who you are connecting for​

The Acting as selector in the page header chooses whose account you are looking at:

  • My account - the first option, and yours alone: one sign-in per integration for the whole organization. Used only by turns you run, and by agents set to run as the person using it in domains whose owners allow personal sign-ins. It carries a credential and nothing else - settings and enabled tools always come from the domain's connection - and it holds exactly one, so there is nothing to name and nothing to pick between.
  • A domain you own (Customer Support, Finance) - the team account unattended agents and flows run through, managed by that domain's owners.

Connected state is per owner: Slack can be connected for the Customer Support domain and not for Sales. The Acts as tile names whichever one the page is currently showing. The picker always renders, even where you own no domain and My account is the only option - a greyed control that names the owner answers "acting as whom?" where a hidden one would not. On a plan that permits a single domain it is not shown at all: there is one team account and nothing to choose between.

Connect​

  1. Open Integrations → Catalog and choose the integration.
  2. Pick the right Acting as identity in the page header.
  3. Follow the Setup instructions beside the tools - each integration documents exactly what to create on the provider's side and which scopes or permissions it needs.
  4. Select Connect, complete the fields, and enter a Credential label such as production when the drawer asks for one.

OAuth integrations may send you through the provider's sign-in flow. If an organization OAuth app is required, an administrator configures it under Integrations → OAuth apps; until then that provider's Connect button does not render.

Secrets are write-only: encrypted at rest, decrypted only for a tool invocation, and never shown again - the credential list shows when secrets were last updated, not the secrets. See Credential handling.

Named credentials and rotation​

A domain's Team account section holds one credential per environment - production, staging, sandbox. Select Add credential to add another; use a credential's action menu to rotate or delete it. The credential marked default is what runs use when nothing selects a different one - see credential precedence. Under My account the same section reads Your sign-in and takes exactly one credential, so Add credential disappears once it holds one.

Let members sign in with their own account​

Members may run a domain's agents as themselves by default: Personal sign-ins → Members may sign in with their own account is on unless a domain owner turns it off, and it does not depend on the domain connecting a team account first. The switch sits on the integration's page for the domain whether or not anything is connected there, beside a count of the members who have signed in. Turning it off removes nothing; it only stops new turns resolving that way.

Turning it off is the owner's decision and nothing reaches past it: a binding set to fall back to the team account still fails to resolve a person while the switch is off. Choosing the identity is covered in Identity.

Configuration properties​

Some integrations carry non-secret configuration alongside the credentials - Slack's default channel, an HTTP integration's base URL. These live in the Configuration section and can be edited without touching secrets.

Disconnect​

Select Disconnect at the foot of the accounts section. The confirmation explains which agents and flows depend on this account before you confirm; after disconnecting, calls that need it fail with a named error until it is connected again.

Tips​

If Connect is unavailable, complete every required field or ask an administrator to configure the required OAuth app. If an agent or flow still reports the integration as unconnected, check which domain it expects: a team-account binding resolves the connection of the domain the agent or flow lives in, which may not be the one you just connected. See Troubleshooting.