Skip to content

Setup & integrations

Slate connection

Slate base URL, service-access user, password, IP allowlist, and the live test-connection button.

Customer-app route
/settings/slate-connection
Who uses this
Every authenticated team member. Practically used by your Slate captain.

What it is

The credentials surface for Slate. Holds the encrypted service-access password (envelope encryption per CLAUDE.md Rule 6). The test-connection button runs all three legs of the integration and reports per-leg pass/fail.

What you can do here

  • Set or update the Slate base URL (e.g., https://your-school.technolutions.net).
  • Set the service-access username + password.
  • See the IP allowlist CeliaConnect requests from (for your Slate IP rules).
  • Run a live test connection — green check or per-leg error.
  • Delete the connection — also pauses every Flow that depends on it.

Common workflows

Initial connection

  1. In Slate, create a service-access user dedicated to CeliaConnect.
  2. Allow the CeliaConnect IPs through your Slate IP rules.
  3. Paste credentials into this page.
  4. Click Test connection.

Rotate the password

  1. Rotate the service-access password in Slate.
  2. Paste the new password here.
  3. Re-test. Active Flows pick up the new credential on their next run.

Common gotchas

Test fails: 401 Unauthorized

Wrong password, or the service-access user is disabled. Confirm the user is active in Slate and the password is current.

Test fails: 403 Forbidden

IP allowlist mismatch. Add the CeliaConnect IPs (shown on this page) to your Slate IP rules.

Test fails: query/source-format leg only

Connection works but a specific Flow's URL is unreachable. Open the Flow's detail page and retest its URLs individually.