Skip to content

Changelog

Updates to Oblique.

Oblique now syns with Okta every 10 minutes instead of every 5 minutes.

Fixed
  • Issue with detecting some Okta group rules
Changed
  • Frequency of Okta syncs

The ‘People’ page allows you to see all users in your Oblique instance, and filter these by name, email, job title, and manager. You can use multiple filters, including multiple filters of the same type, and filter for users not matching the specified filter.

New
  • People list page with complex filtering
  • Copy button for user attributes
Fixed
  • Issue with 'Open in Okta' navigation for some Okta tenants
Changed
  • Ordering of content on request detail page
  • Better handling of large dropdown lists
  • Better handling of scroll location when navigating across app
Fixed
  • Disable editing individual entitlements for resources in Pull mode
  • Incorrect actor name in audit logs for changes synced from integrations
  • Missing audit log for updating canonical attributes
Fixed
  • Dark mode support for audit logs
  • Issue navigating access graph not closing graph view
New
  • Okta apps include Okta app ID
Fixed
  • Resource hovercard shown in access table
  • Sync built-in Okta groups, including the Everyone group

Oblique automatically imports and syncs custom user attributes from Okta with the data type string. These are included on a user’s profile and can be used for creating attribute-based groups.

New
  • Import custom user attributes from Okta

Enter your email then authenticate to log into the corresponding Oblique instance.

New
  • Login page
Fixed
  • Large access graphs not rendering

Audit logs are redesigned to show summary information directly in the audit logs table, with additional information provided in a drawer. The drawer includes a log diff, which can be copied.

Changed
  • Redesign of audit logs
  • Renamed 'Appearance' to 'Theme' (i.e. dark mode)
Fixed
  • Issue with adding new Google Workspace integrations in the Europe region

Use Okta as an identity provider for single sign-on (SSO) to authenticate to Oblique.

New
  • Okta single sign-on

Oblique is available in an additional region: a Europe region at eu.oblique.security.

Oblique syncs both the managerId and manager user attributes from Okta. If the managerId is an Okta userId, it will be used as the canonical attribute for manager. Otherwise, if the manager attribute is an email, it is used instead. The canonical attribute for manager is used to populate the reporting chain.

New
  • Use Oblique in the Europe region (eu.oblique.security)
  • Sync user attribute division from Okta
Fixed
  • Okta integrations can use Okta demo tenants
  • Integration logos showing wrong logo
  • Okta app logos not showing properly
Changed
  • Default appearance set to Light theme
  • User attribute manager from Okta opportunistically used as the canonical attribute for manager
  • Additional menu items in navigation header
  • Improved mobile navigation
New
  • Okta groups with group rules are discouraged from being put into 'push' mode
Fixed
  • The last Admin in an organization cannot be removed. Each organization must have at least one Admin.
  • Bug with reselecting reviewer when request re-renders
New
  • Okta app group assignment included in user, team, and group access table
  • Link to Google Admin from Google integration detail page
Changed
  • Request titles for 'Create entitlement for...', 'Update entitlement for...', and 'Revoke entitlement for...' are now 'Grant access to...', 'Update access to...', and 'Revoke access to...'
New
  • Drawer to explore user attributes from an integration
Fixed
  • Display of secondary email
  • Search in resource picker
Changed
  • Integration display name hidden when only there is only one integration of the same type
  • Renamed 'System Bootstrap Service Account' to 'Init Service Account'

Requests automatically select a reviewer for a request. In order of preference, this is the requestor (if they can self-approve), an object owner, or an Oblique Admin. The requestor can still select a different reviewer from the list of possible reviewers if desired.

Changed
  • Reviewer automatically selected for requests

Okta app detail pages include how a user has access to a resource, i.e. with an individual or group Okta app assignment.

New
  • Okta apps show Okta group assignments
  • User profiles include secondary emails
Fixed
  • Groups list page search query persists reloading

When multiple integrations provide the same user information, like title or manager, canonical attributes determine which source Oblique displays in user profiles.

Attributes from integrations are namespaced and all attributes remain available for attribute-based groups.

New
  • Canonical attributes
Fixed
  • Extended Latin accents now render correctly
  • Removed links to Okta and audit logs for non Admins
Changed
  • Redesign of integrations list page
  • Improved keyboard navigation in integrations list page
New
  • Filter resources by type (Okta group, Okta app, Google group)
  • Integration detail page shows number of attributes being synced

The Oblique Slack app lets Oblique notify users about pending requests directly in Slack.

The Slack app sends notifications for all requests made in Oblique to a public channel. Requestors and reviewers are automatically tagged, with updates threaded and status changes reflected in real-time.

New
  • Notifications for requests
  • Slack app
New
  • Go to profile option in command palette
Fixed
  • Faster navigation in reporting hierarchy
Deprecated
  • Administrative information removed from resource detail sidebar

Request access for current user by default

Section titled “Request access for current user by default”
New
  • App icons for Okta apps
Changed
  • Resource detail page shows whether current user has access
  • When making an access request, use current user as default subject

App assignments for Okta groups are shown on both the Okta app and the Okta group. View which Okta apps an Okta group is assigned on the Okta group’s resource detail page, and which Okta groups are assigned an Okta app on the Okta app’s resource detail page.

New
  • Group assignments for Okta apps shown on Okta app detail page
  • Okta apps assigned to group shown on Okta group detail page
Fixed
  • Requests cannot have duplicate changes
  • Deleted teams' members cannot be changed

Request change and access change summary card

Section titled “Request change and access change summary card”
New
  • Summary of changes and access changes in request page activity section
  • Count of apps being synced from an integration included in integration detail page
  • List of resources being synced from an integration on integration detail page
  • Attribute-based group and team group members lists show when users were added in overflow menu
Changed
  • Integration sync logs show relative time
  • Okta app assignments sync every 5 minutes

Okta apps and Okta app assignments sync as resources and entitlements for those resources. Put Okta apps into push mode to make Oblique the source of truth for app assignments.

New
  • Okta apps sync as resources
  • Team creation requests link to the created teams once the request is applied
Fixed
  • Entitlement expiration countdown shows n days, not n-1 days
  • Grant access button removed from push resources
Changed
  • More compact access previews in entitlement requests
  • Tweaking of Google OAuth2 prompts for faster logins
  • Add members button changed to Edit members on team detail page
  • Sync time under 1 minute shows 'just now'
New
  • Summary of access changes for users and resources in a request
Fixed
  • Request reviewers and Oblique Admins can enable or disable auto-apply for a request
Fixed
  • Bug with expiring some entitlements
Changed
  • Request timeline events for the same action are grouped

Request entitlement extension and revocation

Section titled “Request entitlement extension and revocation”

All entitlement changes use the request workflow.

New
  • Request to edit entitlements, to change expiration
  • Request to revoke entitlements

Creating an entitlement now uses the request workflow. Users can request access for themselves, another user, or an attribute-based group or team to any resource. The request can be approved by the resource owner or an Oblique Admin.

New
  • Request to create entitlements
  • Oblique automatically closes requests that are obsolete
Fixed
  • Bug with removing users from groups
Changed
  • Creating an entitlement is now a request
  • When an integration is removed, its resources are soft deleted
Deprecated
  • Obsolete requests are now 'Closed' with a comment instead of 'Obsoleted'
Fixed
  • Requests list page showed timestamps twice
  • Requests links opened in new tabs

Remove an integration to immediately stop syncing it. All resources from the integrations will be removed from Oblique.

New
  • Remove integration

Instead of auto-applying a change request, you can manually apply it after approval. This option can be changed until the request is approved. Once a request is approved, it can be applied by either the requestor, an owner, or an Oblique Admin.

New
  • Manually apply requests
Fixed
  • Author badge also shown in owner section of team requests
  • Request subtitle shows closed time for closed requests
Changed
  • Request title for single user changes include user's name
Changed
  • Requests are now 'Applied' instead of 'Merged'

The history of a request is now shown at the top of the request, with information on changes and access changes shown in separate tabs.

The request also shows if it set to auto-merge. This can be disabled by the requestor.

New
  • Disable auto-merge for request
  • User, team and group profiles display what other objects they are an owner of
Changed
  • Request page layout

Instead of using parent teams to allow for more complex management of a team, set another team group or attribute-based group as a team’s owner.

Deprecated
  • Parent teams
  • Team hierarchy section
Changed
  • Any user, not just a team owner, can request removing a member from a team
  • Redesigned team hierarchy component
Fixed
  • Request comments appear in the audit log for request events
Changed
  • User attributes section only visible to yourself and to Oblique Admins
  • Group and team hovercards include membership information, e.g., Member
  • URL for team detail page is now /teams/* instead of /team/*

Several improvements to the requests user experience, to make these easier to understand, faster, and more streamlined.

The Oblique app now live updates, so that when one user makes a change, for example approving a request, it immediately updates for other users, without needing to refresh the page.

When requests are approved, they are automatically merged.

When a user creates a request for a new team, they are automatically added as a team owner and team member as part of the request. If this is not what is desired, they can remove themselves prior to submitting the request.

Users list view has been deprecated. If you need to find a specific user, use the search bar and command palette.

New
  • Changes live update
  • Groups list view shows whether a user is part of a group
  • Users can leave a group they are a member of
  • Requests appear in audit logs
Fixed
  • Incorrect keys for Windows keyboard shortcut
  • Bug where direct team owners were unable to approve team changes
Changed
  • Approved requests auto-merge
  • Requestors for team creation are automatically listed as team owners and team members
  • User hovercards and detail pages include relationship information, e.g., Manager or Peer
  • User hovercards include email copy button
Deprecated
  • Users list view
New
  • Navigate to requests from the command palette
Changed
  • Users, teams and groups no longer have a 'Management' sidebar
  • Non-Admin users can no longer see configuration information for Integrations
New
  • Filter requests by state
  • Change user to add as part of a request to join a team

Each request includes a history of the request, including when it was created, any reviews requested, when it was approved, and when it was merged. This history also includes any comments made.

New
  • See request history

Requirements for a request to be approved are listed in the Review section, for example, changing team membership requires the approval of a team owner. Where a specific reviewer is required, you can choose Add reviewer to add a reviewer meeting those requirements, rather than manually selecting reviewers.

New
  • Requirements listed for approving a request
  • Option to add a suggested reviewer to meet a requirement

If set at the integration level, the creation of a new team in Oblique creates a corresponding Google group for the team.

New
  • Create Google groups for new teams
Changed
  • Redesign of team create request
New
  • Add comment when approving a request
Changed
  • Separate Approve and Merge buttons

Once a request is approved, it can be merged by either the requestor, an owner, or an Oblique Admin. Requests are not automatically merged.

New
  • Merge requests after approval
  • Timeline of requests on team detail page
Changed
  • Approved requests are not immediately merged

Owners of teams in Oblique can request to edit a team’s members, which needs the approval of the team owner, the parent team’s owner, or an Oblique Admin. A user can request to add or remove themselves or other members from the team. When an Admin reviews the request, they see how the request author is related to the team.

New
  • Edit team members request
  • Badge for author of edit team members request
  • Reviewers list includes an explanation for why they can be a reviewer
Changed
  • Editing a team's members requires a request
  • Reviewers can be edited after a request is created

When creating a request, a team can select specific reviewers to review the request. For joining a team, team owners are listed. For all requests, Oblique Admins are listed.

If the user making a request has sufficient permissions to approve it, e.g., if they are an Admin creating a team, the request is auto-approved.

New
  • Select reviewers for a team create request
  • Select reviewers for a team join request
Changed
  • Auto-approve requests
  • Improved picker for parent team in team create request

Users of Oblique can request to join a team, which needs the approval of an Oblique Admin. The user can also optionally include a justification as part of the request. When an Admin reviews the request, they can also preview how the user’s access will change when they are added to the team.

Creating a team always requires a request, including when an Admin requests to create a team.

New
  • Join team request
Changed
  • Creating a team always requires a request
New
  • Requests tab shows count of open requests
Changed
  • Requests awaiting approval are now called 'Open' instead of 'Active'

Users of Oblique can request the creation of a new team, which needs the approval of an Oblique Admin. The request includes the team name, description, members, owners, and parent team. The user can also optionally include a justification as part of the request. Admins can see requests in the new requests page, accessed from the Requests tab.

New
  • Team create request
  • Requests page
Changed
  • Vertical redesign of group creation page
  • Vertical redesign for team creation page
  • Vertical redesign for add entitlement page
  • Vertical redesign for add integration page
New
  • Rich hovercard with detailed group information
  • Rich hovercard with detailed team information
  • Rich hovercard with detailed resource information

Connect Oblique with Google Workspace to pull users from Google and manage Google Groups. Pull and push membership of Google groups from within Oblique.

New
  • Sync users from Google Workspace
  • Sync Google groups resources
  • Manage Google groups resources
New
  • Rich hovercard with detailed user information
  • Search for users by email
Changed
  • Improved view of reporting chain and reports
New
  • Add and remove team members as part of a single change

Preview the impact of an access change as part of adding entitlements or changing team membership:

  • Which users and resources are affected, and which users remain unaffected
  • Which users gain or lose access per resource
New
  • Preview the impact of access changes on users and resources

Quick search for users, team and attribute-based groups, resources, and integrations by typing their name in directly.

You can also use keyboard shortcuts for search. Use Command + K Control + K to open search.

New
  • Search for integrations
New
  • Integration sync logs

Attributes display a richer set of information, including what integration they are from, total number of values, and sample values.

New
  • Rich attributes on the user profile, group detail, and integration detail pages
  • Download a csv of attributes from the integration detail page

Oblique is available in Light, Dark, and System modes. By default, Oblique respects System settings.

New
  • Dark mode
Changed
  • By default, Oblique's appearance is set to System

See users with indirect access to a resource

Section titled “See users with indirect access to a resource”

From the resource detail page, you can:

  • See a list of every user who has access to the resource
  • Identify whether each user has direct access, indirect access (through group membership), or both
New
  • See list of users with indirect access to the resource from the resource detail page
  • See how a user has access (direct, indirect, or both) and via which groups or teams from the resource detail page
  • Delete direct user entitlements from the resource detail page
  • Filter resource list by the number of users with access to the resource
  • Integration detail page shows recent syncs
Changed
  • By default, the resource list is filtered by the number of users with access to the resource