Manage integrations

Integrations connect Oblique with external systems in your organization to synchronize data and manage access. Oblique can both read information about users, user attributes, and resources from an integration, and write access decisions back to integrations.

Each integration has owners who manage it. By default, the user who adds an integration and all Oblique admins are its owners.

Add an integration

Adding a new integration will immediately start syncing it.

You must be an admin to add an integration.

If you aren’t an admin, ask one for an install link. You become an owner of the integration when you connect it.

To add an integration, navigate to the Integrations page:

1. Select Add integration.
2. Select the integration you wish to add.
3. Complete the setup steps for the integration, including providing Oblique with the necessary credentials to access the integration.
4. Select Connect or Add integration.

Oblique will automatically start syncing all users, user attributes, accounts, and resources from the integration. You’re added as the integration’s owner and shown as the user who connected it.

Create an install link

An Oblique admin may not be an admin of the external system, such as Google Workspace or a GitHub organization. An install link lets someone who isn’t an Oblique admin connect an integration. They then become an owner of the integration.

You must be an admin to create an install link.

To create an install link, navigate to the Integrations page:

1. Select Add integration.
2. Select the integration you want someone else to connect.
3. Open the menu beside the Connect or Add integration button and select Create a shareable install link…, then Create link. Oblique shows the link once.
4. Copy the link and send it to the person who will connect the integration.

When they open the link, they sign in to Oblique on the integration’s setup page. Once they connect it, they become an owner of the integration, and Oblique shows them as the user who connected it.

An install link only works for a user in your Oblique tenant, and only for the integration you created it for. It can connect a single integration, after which it expires, or it expires after 7 days. If it expires, create a new one. You can create as many links as you need.

Caution

Oblique only shows an install link when you create it. You can’t revoke an install link.

Change an integration’s connection

If an integration’s credentials change, or Oblique needs broader authorizations than it was originally granted, you can update the connection without removing and re-adding the integration.

You must be an admin to change an integration’s connection.

From the integration’s detail page:

1. Navigate to the Settings tab.
2. Under Connection, select Replace to enter a new credential, or Reconnect to re-authenticate through the integration’s OAuth flow. If the connection was originally granted read-only access, you can also select Upgrade to read-write.

Oblique will immediately start using the new credential and authorizations.

Edit an integration’s owners

Editing an integration’s owners requires a request.

From the integration’s detail page, or from the app’s page:

1. In the Owners section, select Edit. This will open a request form.
2. To add owners, select Add owners to search for and select the users, groups, or teams you wish to add as owners. To remove owners, find the line for the owner you wish to remove, and select Remove.
3. In the Approvals section, review the checks needed to edit this integration’s owners. By default, approval is needed from either an Oblique admin or an existing owner. Select the list of reviewers to assign different reviewers.
4. Select Create request.

Once the request passes all checks, if it’s set to auto-apply, Oblique automatically applies it and updates the owners for you.

See who connected an integration

Oblique shows the user who added an integration or last changed its connection, and when, whether they connected it through OAuth or with an API key. It isn’t shown if an Oblique API key, such as one used by Terraform, last changed the connection.

From the integration’s detail page:

1. Navigate to the Settings tab.
2. Under Connection, see Connected by.

Remove an integration

Removing an integration will immediately stop syncing it. All users, resources, and access will remain exactly as they were when you disconnected Oblique.

In Oblique, all resources from that integration are soft deleted, so that any references to those resources in request history and audit logs are still available.

You must be an admin to remove an integration.

To remove an integration, from the integration’s detail page:

1. Navigate to the Settings tab.
2. At the bottom of the page, under Delete integration, select Delete integration….
3. In the confirmation dialog, type the text to confirm, then select Delete integration.

Oblique will immediately stop syncing all information from an integration, and remove all users, user attributes, accounts, and resources from the integration.

Caution

Removing an integration doesn’t revoke Oblique’s access to the external system, except for GitHub, where Oblique uninstalls its GitHub App. To revoke Oblique’s access, also remove Oblique from the external system. Each integration’s page describes how.