CreateIntegration

POST/api/v1/integrations

Connect an integration, which starts syncing the resources and accounts it can see.

Example request

US
Europe

curl -X POST \
  -H "Authorization: Bearer ${OBLIQUE_API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{ "displayName": "string", "createGroupForNewTeams": false }' \
  "https://us.oblique.security/api/v1/integrations"

Set OBLIQUE_API_KEY to your API key.

curl -X POST \
  -H "Authorization: Bearer ${OBLIQUE_API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{ "displayName": "string", "createGroupForNewTeams": false }' \
  "https://eu.oblique.security/api/v1/integrations"

Set OBLIQUE_API_KEY to your API key.

Query parameters

integrationIdstring
ID of the integration to create. This value should be 4-63 characters. Valid characters are /[a-z][0-9]-/.

Request body

namestring
Assigned by Oblique.
managementManagement
How this integration is managed. Set automatically by the server based on the calling client. Omitted from responses when the integration is manually managed (the default).
- managerstring
  Allowed values: TERRAFORM
  How the resource is managed. Set automatically by the server based on the caller: Terraform clients produce TERRAFORM; for all other clients the management field is left unset on the response.
- repoUristring
  URI of the VCS repository that holds the Terraform configuration for this resource. Populated by the Oblique Terraform provider.
- repoDirstring
  Optionally, the subdirectory within repo_uri that holds the Terraform configuration for this resource. Populated by the Oblique Terraform provider.
displayNamestring
A human readable name of the integration. For example “Okta Test”.
createTimestring (date-time)read-only
Create and update timestamps.
updateTimestring (date-time)read-only
deleteTimestring (date-time)read-only
The time when the integration was deleted.
One of
- oktaOkta
  apiTokenstringrequired
  The API token to use when making calls to Okta. Required when the integration is created.
  domainBaseUristringrequired
  Full base URL of the Okta domain, including the schema. For example: https://dev-45752433-admin.okta.com
  displayNamestring
  Will be removed in the future in favor of top level display_name.
  organizationIdstringread-only
  The tenant ID of the Okta organization. This is detected on first creation of the integration and is not editable.
  ignoreUsersIgnoreUsers
  attributesUserAttribute[]required
  If provided, the integration will ignore users that have any of the given attributes set to this value. If multiple attributes are provided, the user will be ignored if any of their attributes match these rules. Custom attributes are supported.
  keystringrequired
  The key of the attribute. For example “department”.
  valuestringrequired
  The value of the attribute. For example “Engineering”.
- googleGoogle
  domainstringrequired
  The domain to query for groups and memberships.
  missingReportsScopesbooleanread-only
  Whether the connection is missing the Google OAuth scopes required to sync sign-in reports from the Google Workspace audit logs.
  connectedAccountEmailstringread-only
  The email of the Workspace administrator who authorized the connection. Empty for a connection that authenticates as Oblique’s service account through domain-wide delegation rather than through OAuth 2.0.
  manageGroupsbooleanread-only
  Whether Oblique can manage the Workspace’s groups, creating them and changing their membership, which a resource in push mode needs. False when the administrator who authorized the connection approved reading the Workspace but not managing its groups.
- slackSlack
  teamIdstringrequired
  The team ID that has been configured for notifications.
  teamNamestringread-only
  The human readable name of the team that has been configured for notifications.
  channelIdsstring[]
  Channels to send notifications to.
  dmDisabledboolean
  Whether DM notifications are disabled. This is false by default.
  domainBaseUristringread-only
  The domain base URI of the Slack instance, including the schema. This is detected on creation and is not editable. For example: https://myworkspace.slack.com
  allowApprovalWorkflowboolean
  Whether reviewers can approve requests directly from the Slack notification. This is true by default.
- githubGitHub
  orgstringrequired
  The GitHub organization name to sync members and teams from. May be changed by the user on the GitHub side.
  orgIdstringread-only
  The immutable GitHub organization ID.
  installationIdstringread-only
  The GitHub App installation ID for this organization. Set by the installation callback.
  baseUristring
  Base URI of the GitHub instance, including the schema. Defaults to “https://github.com”. Set this to target GitHub Enterprise Cloud.
  displayNamestringread-only
  The human readable display name of the GitHub organization, synced from GitHub. Empty if the organization has not set one.
- cloudflareCloudflare
  accountIdstringread-only
  The ID of the Cloudflare account that members and policies are synced from. Determined by the account the admin grants access to when connecting, and not editable afterwards.
  accountNamestringread-only
  The human readable name of the Cloudflare account, read from Cloudflare when the integration is connected. Empty if Cloudflare reports the account without a name.
- notionNotion
  workspaceIdstringread-only
  The ID of the Notion workspace that members are synced from. Determined by the workspace the admin grants access to when connecting, and not editable afterwards.
  workspaceNamestringread-only
  The human readable name of the Notion workspace, read from Notion when the integration is connected. Empty if Notion reports the workspace without a name.
- linearLinear
  workspaceIdstringread-only
  The ID of the Linear workspace that members and teams are synced from. Determined by the workspace the admin grants access to when connecting, and not editable afterwards.
  workspaceNamestringread-only
  The human readable name of the Linear workspace, read from Linear when the integration is connected.
  uriKeystringread-only
  The URL key of the Linear workspace, used to build links into Linear. For example “oblique” for https://linear.app/oblique.
- anthropicAnthropic
  apiKeystringrequired
  The Admin API key used to read the organization’s members and workspaces. Required when the integration is created, and never returned by the API. Provide it again to rotate the key.
  organizationIdstringread-only
  The ID of the Anthropic organization that members and workspaces are synced from. Determined by the organization the API key belongs to, and not editable afterwards.
  organizationNamestringread-only
  The human readable name of the Anthropic organization, read from Anthropic when the integration is connected.
- posthogPostHog
  organizationIdstringread-only
  The ID of the PostHog organization that members and projects are synced from. Determined by the organization the admin grants access to when connecting, and not editable afterwards.
  organizationNamestringread-only
  The human readable name of the PostHog organization, read from PostHog when the integration is connected.
  baseUristringread-only
  The base URI of the PostHog region the organization lives in. Either “https://us.posthog.com” or “https://eu.posthog.com”.
createGroupForNewTeamsboolean
If true, the integration will create a group for each new team.
userCountinteger (int32)read-only
The number of users that the system contains.
resourceCountinteger (int32)read-only
The number of resources that the system manages.
resourcePushCountinteger (int32)read-only
The number of resources that have been pushed to the integration.
resourcePullCountinteger (int32)read-only
The number of resources that have been pulled from the integration.
supportsPushbooleanread-only
Whether the integration can push to at least one of the objects it reports. Some of its write capabilities may still be unavailable. Determined by the access the integration was granted, and re-evaluated on every sync.
needsReauthbooleanread-only
Whether the integration is missing access that Oblique asks for, which is granted by reconnecting it. Re-evaluated on every sync.

Response

200Integration

Integrations connect Oblique with external systems in your organization. Oblique can both pull information from and push access decisions back to integrations.

namestring
Assigned by Oblique.
managementManagement
How this integration is managed. Set automatically by the server based on the calling client. Omitted from responses when the integration is manually managed (the default).
- managerstring
  Allowed values: TERRAFORM
  How the resource is managed. Set automatically by the server based on the caller: Terraform clients produce TERRAFORM; for all other clients the management field is left unset on the response.
- repoUristring
  URI of the VCS repository that holds the Terraform configuration for this resource. Populated by the Oblique Terraform provider.
- repoDirstring
  Optionally, the subdirectory within repo_uri that holds the Terraform configuration for this resource. Populated by the Oblique Terraform provider.
displayNamestring
A human readable name of the integration. For example “Okta Test”.
createTimestring (date-time)read-only
Create and update timestamps.
updateTimestring (date-time)read-only
deleteTimestring (date-time)read-only
The time when the integration was deleted.
One of
- oktaOkta
  apiTokenstringrequired
  The API token to use when making calls to Okta. Required when the integration is created.
  domainBaseUristringrequired
  Full base URL of the Okta domain, including the schema. For example: https://dev-45752433-admin.okta.com
  displayNamestring
  Will be removed in the future in favor of top level display_name.
  organizationIdstringread-only
  The tenant ID of the Okta organization. This is detected on first creation of the integration and is not editable.
  ignoreUsersIgnoreUsers
  attributesUserAttribute[]required
  If provided, the integration will ignore users that have any of the given attributes set to this value. If multiple attributes are provided, the user will be ignored if any of their attributes match these rules. Custom attributes are supported.
  keystringrequired
  The key of the attribute. For example “department”.
  valuestringrequired
  The value of the attribute. For example “Engineering”.
- googleGoogle
  domainstringrequired
  The domain to query for groups and memberships.
  missingReportsScopesbooleanread-only
  Whether the connection is missing the Google OAuth scopes required to sync sign-in reports from the Google Workspace audit logs.
  connectedAccountEmailstringread-only
  The email of the Workspace administrator who authorized the connection. Empty for a connection that authenticates as Oblique’s service account through domain-wide delegation rather than through OAuth 2.0.
  manageGroupsbooleanread-only
  Whether Oblique can manage the Workspace’s groups, creating them and changing their membership, which a resource in push mode needs. False when the administrator who authorized the connection approved reading the Workspace but not managing its groups.
- slackSlack
  teamIdstringrequired
  The team ID that has been configured for notifications.
  teamNamestringread-only
  The human readable name of the team that has been configured for notifications.
  channelIdsstring[]
  Channels to send notifications to.
  dmDisabledboolean
  Whether DM notifications are disabled. This is false by default.
  domainBaseUristringread-only
  The domain base URI of the Slack instance, including the schema. This is detected on creation and is not editable. For example: https://myworkspace.slack.com
  allowApprovalWorkflowboolean
  Whether reviewers can approve requests directly from the Slack notification. This is true by default.
- githubGitHub
  orgstringrequired
  The GitHub organization name to sync members and teams from. May be changed by the user on the GitHub side.
  orgIdstringread-only
  The immutable GitHub organization ID.
  installationIdstringread-only
  The GitHub App installation ID for this organization. Set by the installation callback.
  baseUristring
  Base URI of the GitHub instance, including the schema. Defaults to “https://github.com”. Set this to target GitHub Enterprise Cloud.
  displayNamestringread-only
  The human readable display name of the GitHub organization, synced from GitHub. Empty if the organization has not set one.
- cloudflareCloudflare
  accountIdstringread-only
  The ID of the Cloudflare account that members and policies are synced from. Determined by the account the admin grants access to when connecting, and not editable afterwards.
  accountNamestringread-only
  The human readable name of the Cloudflare account, read from Cloudflare when the integration is connected. Empty if Cloudflare reports the account without a name.
- notionNotion
  workspaceIdstringread-only
  The ID of the Notion workspace that members are synced from. Determined by the workspace the admin grants access to when connecting, and not editable afterwards.
  workspaceNamestringread-only
  The human readable name of the Notion workspace, read from Notion when the integration is connected. Empty if Notion reports the workspace without a name.
- linearLinear
  workspaceIdstringread-only
  The ID of the Linear workspace that members and teams are synced from. Determined by the workspace the admin grants access to when connecting, and not editable afterwards.
  workspaceNamestringread-only
  The human readable name of the Linear workspace, read from Linear when the integration is connected.
  uriKeystringread-only
  The URL key of the Linear workspace, used to build links into Linear. For example “oblique” for https://linear.app/oblique.
- anthropicAnthropic
  apiKeystringrequired
  The Admin API key used to read the organization’s members and workspaces. Required when the integration is created, and never returned by the API. Provide it again to rotate the key.
  organizationIdstringread-only
  The ID of the Anthropic organization that members and workspaces are synced from. Determined by the organization the API key belongs to, and not editable afterwards.
  organizationNamestringread-only
  The human readable name of the Anthropic organization, read from Anthropic when the integration is connected.
- posthogPostHog
  organizationIdstringread-only
  The ID of the PostHog organization that members and projects are synced from. Determined by the organization the admin grants access to when connecting, and not editable afterwards.
  organizationNamestringread-only
  The human readable name of the PostHog organization, read from PostHog when the integration is connected.
  baseUristringread-only
  The base URI of the PostHog region the organization lives in. Either “https://us.posthog.com” or “https://eu.posthog.com”.
createGroupForNewTeamsboolean
If true, the integration will create a group for each new team.
userCountinteger (int32)read-only
The number of users that the system contains.
resourceCountinteger (int32)read-only
The number of resources that the system manages.
resourcePushCountinteger (int32)read-only
The number of resources that have been pushed to the integration.
resourcePullCountinteger (int32)read-only
The number of resources that have been pulled from the integration.
supportsPushbooleanread-only
Whether the integration can push to at least one of the objects it reports. Some of its write capabilities may still be unavailable. Determined by the access the integration was granted, and re-evaluated on every sync.
needsReauthbooleanread-only
Whether the integration is missing access that Oblique asks for, which is granted by reconnecting it. Re-evaluated on every sync.

Errors

Status	Meaning
`400`	Malformed request
`401`	Missing or invalid API key
`403`	Not allowed for this API key
`404`	Not found
`429`	Too many requests
`500`	Internal server error