Quickstart

This guide will allow you to start managing access to resources using Oblique. To do that, you’ll need to connect your identity provider and apps, create a group, and give the group access to a resource in one of those apps.

Sign in to Oblique

Authenticate to Oblique using your existing SSO provider.

Sign in to your tenant at us.oblique.security or eu.oblique.security.

Users are automatically created when they first sign in. The first user to sign in is automatically made the organization owner of your Oblique tenant. All subsequent users are created as members.

Follow the setup flow

When an admin first signs in to a tenant with no identity provider connected, Oblique opens a guided setup flow. Select Get started:

1. Under Connect your identity provider, connect your identity provider to sync users, groups, and apps to Oblique, then select Continue.
2. (Optional) Under HR systems, connect your HR system to sync users and user attributes like titles and managers to Oblique.
3. (Optional) Under Notifications, connect your team chat system to Oblique to receive notifications.
4. Select Continue, or Skip if you didn’t connect anything.
5. (Optional) Under Connect your apps, connect the apps your team uses to Oblique to sync users and their entitlements in those integrations. Then, select Continue, or Skip if you didn’t connect anything.
6. (Optional) Under Add other admins, select other users to be admins of Oblique. We recommend having at least two admins. This does not notify them. Then, select Continue, or Skip if you didn’t add anyone.
7. Select Go to Oblique.

If you skipped steps in the setup flow, you can add more integrations from the Integrations page.

Create a group

Groups are a way to group users together to manage access to resources. You can create an attribute-based group, a reporting group, or a team group.

Creating a team group is done through a request. To create a team group:

1. Navigate to the Groups page.
2. Select Add group > Team group.
3. Under Display name, enter a name for the group.
4. (Optional) Under Owners, select the users or groups who can make and review changes to the group. By default, you are added as an owner.
5. Under Members, select users to add as members of the group.
6. In the Approvals section, review the checks needed to create the team group.
7. Select Create request.

Once the request is approved, Oblique creates the team group.

Grant a group or user access

Access changes in Oblique are made through requests, such as creating or revoking an entitlement.

To grant the group you created access to a resource:

1. Navigate to the Access page, and then to the app and resource you want to grant access to. On that resource, select Request access.
2. Under Subjects, select the groups or users you want to grant access to.
3. Under Roles, select the roles you want to grant access to.
4. (Optional) Under Expiration, select a duration for the entitlement. After this time, it will automatically expire and the subjects will lose access.
5. In the Affected users section, preview the expected impact of the change.
6. In the Approvals section, review the checks needed to create this entitlement. Change the assigned reviewers if needed.
7. Select Create request.

Oblique admins and object owners can approve their own requests, from the request detail page.

Once the request is approved, Oblique will flatten the set of users in the group and write the access change to the integration.