Oblique Changelog

Updates for October 9, 2026

Fri, 09 Oct 2026 12:00:00 GMT

New

Select which integration is used for user profile photos
Add suggested Google super admins as admins from the admins page

Changed

Pages load more quickly

Fixed

Issue with Slack request notifications failing for channels Oblique hadn't joined

1Password integration

Wed, 07 Oct 2026 12:01:00 GMT

Oblique’s 1Password integration syncs users and their access to your 1Password account to Oblique.

Oblique’s 1Password integration is currently read-only.

To connect a 1Password account, navigate to the Integrations page, select Add integration, and select 1Password, then create an OAuth application in 1Password.

Read the docs

Tailscale integration

Wed, 07 Oct 2026 12:00:00 GMT

Oblique’s Tailscale integration syncs users and their access in your tailnet to Oblique. This includes each user’s tailnet role.

Oblique’s Tailscale integration is currently read-only.

To connect a tailnet, navigate to the Integrations page, select Add integration, and select Tailscale, then create an OAuth credential in Tailscale.

Read the docs

Updates for October 2, 2026

Fri, 02 Oct 2026 12:00:00 GMT

New

Follow a guided onboarding flow to set up Oblique, including connecting your identity provider, HR system, Slack, and additional integrations, and selecting additional admins

Changed

Updated preview of access changes in requests
Filter audit logs by any user, API key, group, team, resource, or integration

Fixed

Deleted users and integrations showing as Unknown in API keys, audit logs, request history, teams, and access reviews

Updates for September 25, 2026

Fri, 25 Sep 2026 12:00:00 GMT

New

Make access changes in GitHub with read-write GitHub integration
Sync a GitHub organization's teams and their membership
Sync a GitHub organization's repositories as resources, their access and roles
Sync employee information from Google, like job title, manager, and department, as user attributes
See a Google group's email on its resource page
Manually link an integration account to a user when it isn't automatically matched
Access user access reviews through the MCP server

Changed

Requests you recently approved or closed stay in your request inbox for a short period
Request ID format

Deprecated

Filter out and ignore Okta users with specific attributes during sync

Fixed

Missing audit log for reconnecting an integration
Entitlement expirations appearing as delete events in the audit log
Issue with an integration account's access history showing the same access grant twice
Resource owner changes rendering as empty in the audit log diff
Deleted integration showing as Unknown integration in the audit logs
Links to applied or closed requests failing to open it
Issue with a request's access preview showing incorrect expiry information
Slack request summaries not showing an expiring or indefinite entitlement's expiry correctly
Entitlement role names not matching the integration name
Google group's name and description not updating when changed in Google

Claude Console integration

Wed, 23 Sep 2026 12:00:00 GMT

Oblique’s Claude Console integration syncs members and their access in your Claude Console organization and its workspaces to Oblique. This includes each member’s organization and workspace roles.

Oblique’s Claude Console integration is currently read-only.

To connect a Claude Console organization, create an admin API key in Claude Console, then navigate to the Integrations page, select Add integration, and select Claude Console.

Read the docs

Updates for September 18, 2026

Fri, 18 Sep 2026 12:00:00 GMT

New

See the roles a subject has access to, across access, resource, group, team, and user tables
Request a specific role on a resource directly
Bulk-remove accounts that were manually added to an access review
Filter groups by empty or non-empty membership
Filter accounts by their linked user

Changed

Instead of push and pull sync modes, resources in read-write integrations sync in hybrid sync mode, so that Oblique can both make changes and sync back changes made in the integration
When creating a request, the default expiration is indefinite, instead of 90 days
Edit or revoke a role on an expiring entitlement
Instead of a request being auto-approved, a requester who can self-serve needs to explicitly approve their own request

Deprecated

Remove listings. Instead of an admin manually configuring groups of resources and roles to request access to, Oblique surfaces roles it knows about in integrations. Users can request access to these roles directly
Remove push and pull mode. Instead of Oblique only pulling or overwriting access in a specific resource, for read-write integrations, resources are in a hybrid sync mode where Oblique can both make changes and sync back changes made in the integration

Cloudflare integration

Thu, 17 Sep 2026 12:03:00 GMT

Oblique’s Cloudflare integration syncs members and their access to the resource groups and user groups in your Cloudflare account to Oblique. When connected as a read-write integration, Oblique can also manage that access by updating user group membership and policies.

To connect a Cloudflare account, navigate to the Integrations page, select Add integration, and select Cloudflare.

Read the docs

Notion integration

Thu, 17 Sep 2026 12:02:00 GMT

Oblique’s Notion integration syncs members and their access in your Notion workspace to Oblique.

Oblique’s Notion integration is currently read-only.

To connect a Notion workspace, navigate to the Integrations page, select Add integration, and select Notion.

Read the docs

Linear integration

Thu, 17 Sep 2026 12:01:00 GMT

Oblique’s Linear integration syncs members and their access in your Linear workspace and its teams to Oblique.

Oblique’s Linear integration is currently read-only.

To connect a Linear workspace, navigate to the Integrations page, select Add integration, and select Linear.

Read the docs

PostHog integration

Thu, 17 Sep 2026 12:00:00 GMT

Oblique’s PostHog integration syncs members and their access in your PostHog organization and its projects to Oblique.

Oblique’s PostHog integration is currently read-only.

To connect a PostHog organization, navigate to the Integrations page, select Add integration, and select PostHog.

Read the docs

BambooHR integration

Tue, 15 Sep 2026 12:00:00 GMT

Oblique’s BambooHR integration lets you use your HR data in BambooHR as the source of truth for users and user attributes. Sync information about your employees to Oblique, including information on their role and manager to populate their user profile, and their attributes to use in attribute-based groups.

Oblique also imports the accounts that have access to your BambooHR instance, so you can read who has access to BambooHR, as with other integrations you have set up with Oblique. Oblique’s BambooHR integration is read-only.

Read the docs

Updates for September 11, 2026

Fri, 11 Sep 2026 12:00:00 GMT

New

View all accounts in the integrations All accounts tab
Filter accounts by email domain
Filter the people list by group or team membership

Changed

Update an integration's connection or permissions by re-authenticating or editing the API key

Deprecated

Remove the integration display name. This is generated based on the integration name and details, like organization name or domain

Fixed

Issue with a collapsed org chart node showing an incorrect hidden-report count
Issue with relative timestamps showing dates in the future
Issue with audit events showing a raw resource ID instead of its name
Issue with dropping a file outside a dropzone opening it in the browser instead

Updates for September 4, 2026

Fri, 04 Sep 2026 12:00:00 GMT

New

View your plan, usage, and billing contact on a new Billing page
Audit logs and access events include information on the role that was granted

Changed

Connect a Google Workspace integration through OAuth consent, rather than domain-wide delegation
Approvals from Slack enabled by default for newly connected workspaces
Delete a team by creating a request
Audit logs, integration accounts and entitlements show user rather than account where the account has been matched to a user
Exported report for user access reviews shows decision time as well as decision date

Deprecated

Remove the ability to automatically create Google and Okta groups when creating a new team

Fixed

Issue with non-Okta identity providers showing no synced apps
Issue with being unable to save a review after removing the last app from its scope
Issue with a new review copying its scope from an unfinished draft instead of the last completed review
Issue with an app showing as Connected before its first sync in a review had finished

Updates for August 28, 2026

Fri, 28 Aug 2026 12:00:00 GMT

New

See resources that have access to other resources, as part of the resource page and the resource's access graph
See access that a subject has to resources in each integration
Copy the error message from a failed integration sync

Fixed

Issue with pickers being slow or unresponsive for long lists, like companies with many users

Updates for August 21, 2026

Fri, 21 Aug 2026 12:00:00 GMT

New

View a list of accounts that have synced from an integration in the Accounts tab
View information about an account from an integration on account detail page
See a user's GitHub and Slack handles in their contact information on their profile

Fixed

Issue with removing an integration when one of its accounts had access to a resource that the integration owned

User access reviews

Mon, 17 Aug 2026 12:00:00 GMT

Use Oblique to conduct user access reviews, to regularly review who has access to what in your environment based on your compliance obligations. For each review, capture accounts from integrations like your identity providers, directly from an app, or manually via a screenshot or pasting in accounts. Then, make a decision to approve, remove, or change access, and complete any remediation needed based on those decisions.

Oblique lets you define the scope of your review, and keeps track of the accounts, the decisions you made for each, and any remediation items needed. Oblique also generates a PDF report you can share with your auditor of your completed review.

Start a review from the Reviews tab.

Read the docs

Updates for August 14, 2026

Fri, 14 Aug 2026 12:00:00 GMT

New

See a user's Okta and Google accounts on their profile

Changed

Redesign to use a sidebar for navigation

Updates for August 7, 2026

Fri, 07 Aug 2026 12:00:00 GMT

New

See a user's integration accounts on their profile
See a user's integration accounts in the access graph

Fixed

Issue with the per-user access graph showing a stale layout and dialog title
Issue with the audit log failing to load after a referenced account is deleted

GitHub integration

Wed, 05 Aug 2026 12:00:00 GMT

Oblique’s GitHub integration lets you understand the access your users have in GitHub, by syncing your GitHub organization’s members, teams, and team membership to Oblique. The integration is currently at the organization-level and read-only.

When you connect an integration like GitHub or Slack, Oblique imports the accounts in it and matches each one to a user by email address. Imported entitlements are attached to those accounts, so Oblique can tell you which users have access to which resources using those accounts.

Read the docs

Updates for July 31, 2026

Fri, 31 Jul 2026 12:00:00 GMT

New

Warning when the Google integration is missing necessary permissions

Fixed

Issue with an imported entitlement always naming Okta as the source

Updates for July 24, 2026

Fri, 24 Jul 2026 12:00:00 GMT

New

Export the People page as a CSV

Fixed

Issue with the audit log's diff view not displaying properly
Issue with users who aren't admins being able to request roles on draft listings

Updates for July 17, 2026

Fri, 17 Jul 2026 12:00:00 GMT

New

View authentication configuration, including sign-in method, identity provider, and allowed email domains or addresses, on the General settings page

Fixed

Issue with case-sensitive MCP search not filtering teams or groups by display name
Issue with the audit log footer showing the incorrect log count

Updates for July 10, 2026

Fri, 10 Jul 2026 12:00:00 GMT

Changed

Deleting an API key requires typing the key name to confirm
Updated dark mode with clearer visual hierarchy
Navigate drawers with keyboard shortcuts across access and audit log tables

Updates for July 3, 2026

Fri, 03 Jul 2026 12:00:00 GMT

Changed

When adding an auto-approval policy, see member counts for teams and groups

Fixed

Issue allowing the same user to be selected multiple times when editing team membership

Updates for June 26, 2026

Fri, 26 Jun 2026 12:00:00 GMT

Changed

Changes to integrations, groups, teams, users, listing roles, and API keys update in real time, without requiring a page reload
Terraform export zip filenames include a UTC timestamp

Updates for June 19, 2026

Fri, 19 Jun 2026 12:00:00 GMT

New

Typical approval times for listings are shown on the listing detail page and on the request
Slack notification sent to reviewers when they are removed from a request
Keyboard shortcuts for common actions. Where available, shortcuts are shown in tooltips and dropdown menus
Resource attributes are synced from integrations, and shown on resource detail pages
Copy link buttons for group and resource pages

Changed

Audit log for events completed via the Terraform provider show Terraform as the client
Improvements to the access graph to collapse large numbers of linked objects

Terraform provider

Mon, 15 Jun 2026 12:00:00 GMT

Oblique’s Terraform provider, oblique-security/oblique, lets you manage objects in Oblique as code, including integrations, listings, groups, and admins. Once objects are managed by Terraform, they can no longer be modified from the Oblique app, and when you run terraform plan, Terraform will generate a preview of changes in Oblique for your review.

You can copy the Terraform config for objects individually, or for all objects by going to Manage, then to the Terraform page. Once you terraform apply this configuration, the Oblique app will show that they are managed by Terraform and cannot be modified.

Read the docs

Updates for June 12, 2026

Fri, 12 Jun 2026 12:00:00 GMT

New

Request access directly from a group or team detail page
See which Okta groups are push groups and filter for these in the resources list

Changed

Requests list redesigned as an inbox view, allowing you to see the list of relevant requests and the request detail side by side
Request detail redesigned to use tabs with changes and affected users
Theme uses system settings by default

Fixed

Publishing a listing is blocked when resources cannot be switched to push mode due to external constraints, such as when they have enabled group rules

Updates for June 5, 2026

Fri, 05 Jun 2026 12:00:00 GMT

New

Create a listing directly from an Okta app resource page

Changed

Okta resource pages consolidate display for different group features
Recommendations for redundant access link to the listing

Fixed

Skip Terraform-managed entitlements when generating recommendations

Updates for May 29, 2026

Fri, 29 May 2026 12:00:00 GMT

New

Active MCP sessions can now be managed in user settings

Changed

Role pre-fills when requesting access on behalf of another user
Newly added members appear at the top of team update previews

Fixed

Mobile layout issues in access tables across multiple pages

Updates for May 15, 2026

Fri, 15 May 2026 12:00:00 GMT

Changed

Admin pages have moved from Settings to a new Manage section in the navigation
Attribute sources on the Attributes page deep-link to the relevant integration attributes page

Fixed

Issue with team update preview reporting unchanged access as changed when expiry times matched
Audit log diff colors in dark mode

MCP server

Thu, 14 May 2026 12:00:00 GMT

Oblique’s remote MCP server lets you connect to Oblique from the MCP client of your choice. The server is authorized as your user, so both admins and end users can use it to take actions like reading current group membership, making access requests, or configuring policies.

The MCP server supports two scopes: standard, for reading all information available to you and making requests; and privileged, for reading and writing changes directly.

To connect a client, click on your profile picture in the upper right corner, select Account settings, then navigate to the MCP page.

Read the docs

Recommendations

Wed, 13 May 2026 12:00:00 GMT

Recommendations are suggestions from Oblique to simplify entitlements without changing access.

Oblique suggests changes to deduplicate redundant access, where a user has access both directly and indirectly, and to consolidate access, to migrate direct access common to multiple users to a group they all belong to. Recommendations only suggest changes that won’t alter the resulting access in any way.

You can find recommendations for your tenant in the Recommendations tab under Manage. Create a request from a recommendation to apply it.

Read the docs

Updates for May 8, 2026

Fri, 08 May 2026 12:00:00 GMT

New

If you have an open request for a listing role, see this status on the listing detail page
Access graph for an Okta group shows the Okta apps it's assigned to

Changed

Attribute drawer shows separate timestamps for when the attribute was last updated and when the integration last synced

Fixed

Issue with extending a listing entitlement indefinitely
Issue with overlapping listings shortening existing access durations on role requests

Updates for May 1, 2026

Fri, 01 May 2026 12:00:00 GMT

New

If you have an open request to join a team, see this status on the team detail page
Sort access and enitlement tables by specificity, with direct entitlements first, then teams, then groups

Changed

Consistent sort defaults and options across access and entitlement tables
'Canonical' attributes renamed to 'core' attributes
A customer's Oblique deployment renamed from 'instance' to 'tenant'

Fixed

Issue with title truncation in request hovercard
Issue with the 'Add role' dialog suspending the listings page
Group access timelines correctly show 'access expired' rather than 'lost access to' when access expires
Issue with the 'Oblique auto-applied this request' event missing from auto-applied requests

Updates for April 30, 2026

Thu, 30 Apr 2026 12:00:00 GMT

New

Send Slack notifications to private channels

Approve requests in Slack

Thu, 30 Apr 2026 12:00:00 GMT

With the Oblique Slack app, reviewers can receive request notifications and approve them without leaving Slack.

Approving from Slack is disabled by default. An admin can enable approvals from Slack from the Slack integration details, selecting the Settings tab, and under Slack settings by toggling on Approvals from Slack.

From a message in Slack, a reviewer can select Approve or Close to respond to the request.

Read the docs

Updates for April 24, 2026

Fri, 24 Apr 2026 12:00:00 GMT

New

See your instance region in a general settings page
See Okta app status on resource detail page, resource hovercard, and in the resources list
Filter Okta groups by Okta group rule

Changed

Updated groups page to show your groups more prominently
Improved onboarding and empty state pages

Updates for April 17, 2026

Fri, 17 Apr 2026 12:00:00 GMT

New

Browse attributes across all connected integrations in a global attributes page
Create an entitlement to a resource directly from the command palette
See additional information about API keys, including the key name, creator, and permissions, in a hovercard

Changed

Browse attributes from a specific integration in a per-integration attributes page

Fixed

Issue with access graph preserving the position of nodes as you moved them
Issue with team requests showing a blank access section when no access changes were made

Updates for April 10, 2026

Fri, 10 Apr 2026 12:00:00 GMT

New

User profile pages and group and team detail pages show what access they are auto-approved for
Timeline events coming from an integration (e.g., Okta) show the integration as the source, making it easier to distinguish changes made by Oblique from those triggered by your identity provider
Additional Okta user attributes of city, employeeNumber, organization, and primaryPhone synced
Filter the groups, listings, and resources on a user's profile page

Changed

Improved search in pickers and dropdowns
Resource detail page shows an Add entitlement button instead of showing the current user's access status

Updates for April 3, 2026

Fri, 03 Apr 2026 12:00:00 GMT

New

Entitlement drawer on user, group, and team detail pages showing all entitlements that grant access to a given resource
Access change indicator in the requests inbox shows shows the scope of change of each request at a glance
Access table shows entry counts on each tab, to understand how many listings and resources a user, group or team has on their detail page
Okta groups with associated group rules have a group rule badge, with group rule names shown in the resource hovercard
Organization owner shown with a badge in admins table on the admins page

Changed

Update owners for groups, teams, and listings by making a request
If a request is approved with an auto-approval policy, that's more clearly shown on the request detail page and in the request timeline
Changes to listing roles update automatically

Fixed

Issue with profile attributes section displaying incorrect values when multiple integrations share the same attribute key

Updates for March 27, 2026

Fri, 27 Mar 2026 12:00:00 GMT

Changed

Resource-based access visible to admins on user, group, and team detail pages

Fixed

Issue with audit log entries for listing role policies linking to the wrong resource

Auto-approval policies

Sat, 21 Mar 2026 12:00:00 GMT

Auto-approval policies allow members of a group to claim access to a listing role without requiring a human approval. An auto-approval policy also specifies a duration for the access, and whether or not a justification is required when claiming access.

Admins can add auto-approval policies to a listing from the listing detail page, by selecting Manage listing, and then under Auto-approved groups, selecting Add auto-approved group.

Updates for March 20, 2026

Fri, 20 Mar 2026 12:00:00 GMT

New

See exactly who will review a request and why, when creating the request

Changed

Request access directly from a listing detail, not from the overall access catalog
Updated filtering on the Requests page, allowing you to filter requests that are waiting on you to take action
Request includes full listing description

Fixed

Issue with adding or removing a role with overlapping resources
Bug report dialog not submitting
Audit log for expired entitlements reads "revoked access as it expired" instead of showing the expiration date

Updates for March 16, 2026

Mon, 16 Mar 2026 12:00:00 GMT

New

See the events affecting the access for a listing on the listing detail page
Search for listings on the Access page
A syncing indicator shows on listings whenever effective access is updating

Changed

Redesign of request detail page to display checks, approvals, and apply status cohesively
Access previews always show unchanged access, alongside changes
Non-admin users can see suggested reporting groups when creating listings
Login page remembers the email address from your most recent login
Auto-apply request option is hidden when the requester cannot automatically approve the request
Users are consistently sorted by display name throughout the app

Fixed

Bug with resetting and overriding selected reviewers for team join requests
Bug with displaying long content dialogs, while still keeping headers and footers visible

Updates for March 6, 2026

Fri, 06 Mar 2026 12:00:00 GMT

New

Command palette search matches users by secondary email addresses

Fixed

Duplicate audit logs no longer written for creating a request
Reviewers who approved a request are listed even when none were explicitly requested
Switching tabs on a request no longer scrolls to the top of the page

Updates for February 26, 2026

Thu, 26 Feb 2026 12:00:00 GMT

New

See listings a user is the owner of on their profile
Navigate to Access page from command palette

Changed

Resources page moved to a tab under Integrations page
Timeline events distinguish between expired and revoked access
Reporting chain sorted by number of direct reports
Listing detail page shows resources associated with roles
Resource-based events hidden from non-admin users in the event timeline
Auto-applied requests attributed to Oblique in request timeline

Fixed

Access change badges count reflects number of unique users affected
Listings containing deleted resources no longer requestable
Incorrect event summary for entitlement removal

Updates for February 20, 2026

Fri, 20 Feb 2026 12:00:00 GMT

New

User profile access table shows how access granted via groups
Reporting groups that can be created appear when searching for subjects in listing access requests
Search listing access table for roles

Changed

Any user can create reporting groups, not just admins
Reporting group icon in event timeline

Deprecated

Resources no longer have owners. Use listings and listing owners instead

Fixed

Admin self-approval recorded in request timeline
Unclear error when creating a reporting group that already exists
Incorrect grouping of 'lost access' events in the event timeline
Long log lines overflowing in the log side panel

Reporting groups

Tue, 17 Feb 2026 12:00:00 GMT

Reporting groups define users who have the same manager, or are part of the same organization. These can then be granted access to resources or role assignments in Oblique.

There are two types of reporting groups: a user’s direct reports only, and a user’s organization, including their direct and indirect reports. The manager themselves is not included in the reporting group.

You can create a reporting group from the Groups tab, by selecting Add group, then Reporting group.

Read the docs