Single sign-on (SSO)

Oblique supports logging in with several identity providers:

• Google
• Okta

You can enforce any specific authentication requirements, like MFA, in your identity provider. You cannot sign into Oblique with basic authentication (username and password).

Configure Google as your SSO provider

To authenticate to Oblique with Google, log in with your Google account. No further setup is required.

You can also add Google Workspace as an integration to sync objects to Oblique. See Add a Google Workspace directory to Oblique.

Configure Okta as your SSO provider

To authenticate to Oblique with Okta, you must first set up Oblique as a custom OpenID Connect app integration in Okta. Read more about creating a custom OpenID Connect app integration in Okta’s documentation ↗.

From your Okta Admin Console:

1. Navigate to Applications > Application.

2. Select Create App Integration.

3. Under Sign-in method, select OIDC - OpenID Connect.

4. Under Application type, select Web Application.

5. Select Next.

6. In General Settings, under App integration name, enter “Oblique”.

7. Under Sign-in redirect URIs, enter the redirect URI for the Oblique region you are using.

   US
   https://us.oblique.security/api/oauth2-redirect
   Europe
   https://eu.oblique.security/api/oauth2-redirect
   

8. In Assignments, under Controlled access, select Allow everyone in your organization to access, or the appropriate option for your organization.

9. Select Save.

10. On the General tab, copy the Client ID. Under CLIENT SECRETS, copy the client secret.

11. Send your organization’s Okta tenant url, client ID, and client secret to support@oblique.security.

    Caution

    We recommend sharing your client ID and client secret through a method that allows you to revoke access later, such as a 1Password shared item or a Google Doc.

After you submit this information, Oblique will activate your tenant. This is typically done within one business day.

Caution

Oblique is not currently compatible with identity provider initiated login, and only provides service provider initiated login. This means users must start authentication from Oblique, rather than from Okta.

You can also add Okta as an integration to sync objects to Oblique. See Add an Okta tenant to Oblique.

Authorize additional domains to authenticate to your tenant

Oblique supports having users from multiple email domains sign in to the same tenant through the same identity provider configuration. To modify the list of email domains or email addresses allowed to authenticate to Oblique, contact support.

Edit your authentication settings

After initial configuration, to change your tenant’s identity provider or authentication settings, contact support.

Note

Requirements for authenticating to Oblique, such as 2FA and passkeys are managed by your identity provider.

View your authentication settings

To see your tenant’s authentication settings, navigate to Manage:

1. Select General.
2. Under Authentication, you can see your tenant’s sign-in method, identity provider, and allowed email domains or addresses.