Mattermost application

Mattermost is a team messaging and collaboration platform. MIA connects to it to inventory active users, create their accounts, assign them to teams, and close their access.

Authentication type and prerequisites

Authentication type — Personal access token

Prerequisites

Use a personal access token owned by a Mattermost System Administrator. Personal access tokens must be enabled under System Console → Integrations → Integration Management.

Docker deployments

If the setting is missing or locked in the System Console, add the following environment variable to the Mattermost container, then recreate it:

environment:
  MM_SERVICESETTINGS_ENABLEUSERACCESSTOKENS: "true"

Environment variables override the configuration stored in config.json.

Connection steps

1. In Mattermost, open Profile → Security → Personal Access Tokens.
2. Create a token for MIA and copy it immediately.
3. In MIA, open Applications → Add an application → Mattermost.
4. Enter the root URL of your instance (for example https://mattermost.example.com) and the token.

MIA uses the v4 API with Bearer authentication. When opening access, enter the user's Mattermost password and optionally select one or more teams (workspaces) retrieved from the instance. MIA creates the account with the member's email address, then adds it to the selected teams. Closing access deactivates the Mattermost account.

See the Mattermost REST API documentation and the personal access token documentation.