Configure message services

Overview

Incydr's Message Services enable you to send Instructor lessons to users via email, Microsoft Teams, and Slack. Email is always active, but Teams and Slack require some initial authorization and configuration steps before they can be used to send Instructor lessons to users. Configuration instructions for each message service are provided below.

Considerations

• To use this functionality, you must be assigned the Security Administrator role. 
• Your product plan must include Instructor. Contact your Customer Success Manager (CSM) for assistance with licensing. If you do not know your CSM, contact our Technical Support Engineers.

• To allow email from Incydr, ensure that code42.com is added to your email server's allowlist. If you suspect that email is not arriving from Incydr, contact our Technical Support Engineers.

Configure message services

To configure message services, select Administration > Integrations > Message Services.

Email

Email is always available as a message service. No configuration is required to email Instructor lessons to users in response to a change in position or their risky activity.

Incydr automatically creates a new email message in your default email client:

• When you select an Instructor lesson on the Actions menu to send to a user. Customize this new message as needed, then use the email client's tools to send it to the user.
• In response to risky activity that has triggered an alert rule, Incydr automatically sends an email to the user that caused that activity based on:
  • The rule's actions settings
  • The lesson's message settings

Customize the email sender address

• Click Settings to customize the email sender address for Instructor lessons so users see lesson emails as coming from your domain, instead of from code42.com.
• Instructor uses AWS SES to send lesson emails. To prevent emails from being blocked by email filters, add a Send Policy Framework (SPF) record in your DNS that allows AWS to send the email on your behalf. You may also connect with your email provider to accept AWS SES emails for your domain.

Set up mailto: links in your preferred email client
Although no additional configuration is required for email message services in Incydr, be sure to set up mailto: links so that they open correctly in your preferred webmail or desktop email client.

Microsoft Teams

Not available for Incydr Gov F1 and Gov F2 product plans

Authorize Microsoft Teams

To send messages from Incydr to users via Microsoft Teams, you must first authorize the Mimecast app for Teams.

Before you begin

• You must have Global Administrator permissions in Teams to complete these steps.
• Depending on your Teams app approval process, you may need to Unblock the Mimecast app in the Teams Admin Center before proceeding.
• Follow the steps below to install the Teams app from within the Incydr console. Installing the app directly from Microsoft AppSource is not supported and may cause unexpected results.
• You must install at the Team scope. Do not install the app at a personal scope.

To install:

1. Sign in to the Incydr console as a user with the Customer Cloud Admin role.
2. Go to Administration > Integrations > Message Services.
3. On the Microsoft Teams panel, click Authorize.
   Incydr requests access to your organization's Microsoft Teams instance, and lists the permissions required. See Permission requirement details below for more information.
4. Click Accept.
   The app is installed for all existing Teams, and will be automatically added to new Teams created in the future.

To send Instructor lessons to users via Teams, go to Alerts > Manage Rules and select a rule. From the rule settings, go to Actions > Educate users and select a lesson.

Permission requirement details

The Mimecast app for Teams requires these permissions:

• Read all groups
• Get a list of all teams
• Allow the Teams app to manage itself for all chats
• Allow the Teams app to manage itself for all teams
• Allow the app to manage itself for all users
• Sign in and read user profile

These permissions allow the app to:

• Read your group and team structure. This enables the app to identify where to deliver messages.
• Manage its own deployment and configuration. This ensures the messaging service is available to send messages to all users, and to automatically keep its configuration up to date.

These permissions do not allow the app to read message content or files within Teams.

Deauthorize Microsoft Teams

To stop using the Microsoft Teams integration:

1. Sign in to the Incydr console as a user with the Customer Cloud Admin role.
2. Go to Administration > Integrations > Message Services.
3. On the Microsoft Teams panel, click Deauthorize.
   You must have Global Administrator permissions in Teams to complete this step.
4. In the confirmation dialog, click Got it, deauthorize.
   The connection between Incydr and Teams is removed. In addition, Incydr attempts to automatically uninstall and remove the Mimecast app from your Team. Even if removal of the app fails, the connection is still deauthorized.

Slack

Before you can send messages to users from Incydr via Slack, you must authorize the connection to your Slack workspace.

Connect to Slack

1. Use either a web browser or the Slack desktop app to verify that you are signed in to your organization's Slack workspace.
2. Sign in to the Incydr console.
3. Go to Administration > Integrations > Message Services.
4. On the Slack panel, click Authorize.
   Incydr requests access to your organization's Slack workspace, and lists the permissions required. See Permission requirement details below for more information.
5. Approve the third-party connection to Incydr via the steps specific to your role and permissions in Slack:
   • If you are a Workspace Owner or app manager in your Slack workspace, click Allow to approve the third-party service connection.
     You are returned to Incydr and the connection to Slack is activated.
   • If you are not a Slack Workspace Owner or app manager:
     1. Click Submit to send a request to your organization's Slack Workspace Owner or app managers to approve the third-party connection.
     2. Work with your organization's Slack Workspace Owner or app managers to approve the request and grant permission to allow the Incydr third-party service connection to Slack.
     3. Return to Incydr and click Authorize on the Slack panel in Message Services again.
     4. When the Slack request and required permissions appear, click Allow to approve the connection.
        You are returned to Incydr and the connection to Slack is activated.

To deliver Instructor lessons to users in response to risky activity, set up actions settings in alert rules.

Permission requirement details

The Mimecast app for Slack requires these permissions:

• Send messages as @mimecast
• View email addresses of people in a workspace
• View people in a workspace
• View the name, email domain, and icon for workspaces Mimecast is connected to
• Start direct messages with people

These permissions allow the app to:

• Deliver messages directly to users and channels in Slack
• Match users to their email addresses
• Manage its integration across your workspace

These permissions do not allow the app access to the content of messages or files.

Disconnect from Slack

To disconnect an active Slack connection, click Deauthorize. When the prompt appears notifying you that Instructor lessons will no longer be sent to users as Slack messages, click Got it, deauthorize.

When you deauthorize the connection to Slack, Incydr automatically uninstalls its application from your Slack workspace to remove the connection. If this attempt is unsuccessful (for example, if you or your Slack Workspace Owner have already removed the application), the connection is still deauthorized.

Deauthorization can fail due to network issues that interfere with communication to your Slack workspace. If deauthorization fails, try again later or contact your Slack Workspace Owner.

Troubleshoot connection errors

The Incydr connection to Slack can fail for the following reasons:

• Incydr's third-party service connection to Slack was not activated and its authorization has timed out.
• Network issues are occurring that interfere with communication to your Slack workspace.

If Incydr fails to establish a connection to Slack or cannot deliver Instructor messages to users in Slack messages, try again later or contact your Slack Workspace Owner.

External resources

Slack documentation:

• Types of roles in Slack
• Manage app approval for your workspace

Related topics

• Introduction to Instructor
• Send Instructor lessons with the Actions menu
• Create and manage alert rules
• Manage Rules reference