Quickstart

This guide will allow you to start managing access to resources using Oblique. To do that, you’ll need to connect an integration, create a group, and give the group access to a resource in the integration.

Sign into Oblique

Authenticate to Oblique using your existing SSO provider.

For your tenant at us.oblique.security or eu.oblique.security, select your identity provider, and log in.

Users are automatically created on login. The first user to log in is automatically made the organization owner of your Oblique tenant. All subsequent users are created as members.

Add an integration

Oblique integrates with your HRIS and IdP to sync users, user attributes, and resources. To get started, you’ll need to add an integration, such as Okta.

To add an Okta integration:

1. Navigate to the Integrations page.
2. Select Add integration.
3. Select Okta.
4. Enter the Okta domain base URI, such as https://example.okta.com, and API key, which starts with 00.
5. Select Create integration.

Oblique will automatically start syncing users, user attributes and resources from Okta.

Create a group

Groups are a way to group users together to manage access to resources. You can create either an attribute-based group or a team group.

To create a team group:

1. Navigate to the Groups page.
2. Select Add group.
3. Select Team group.
4. Under Display name, enter a name for the group.
5. Under Members, select users to add as members of the group.
6. Select Create group.

Grant a group or user access

Access changes in Oblique are made through requests, such as creating or revoking an entitlement.

To grant the group you created access to this resource:

1. Navigate to the Request access page. If you know the attribute-based group, team group, or user to whom you want to grant access, or the resource you want to grant access to, you can also select Grant access from their detail page.
2. Under Subjects, select the group you want to grant access to.
3. Under Resource, select the resource you want to grant access to.
4. (Optional) Under Expiration, select a duration for the entitlement. After this time, it will automatically expire and the subjects will lose access.
5. (Optional) In the Review section, review the checks needed to create this entitlement. Change the assigned reviewers if needed.
6. Select Create request.

Oblique admins and object owners can approve their own requests, from the request detail page.

Once the request is approved, Oblique will flatten the set of users in the group and write the access change to Okta.