Quickstart

This guide will allow you to start managing access to resources using Oblique. To do that, you’ll need to connect an integration, create a group, and give the group access to a resource in the integration.

Add an integration

Oblique integrates with your HRIS and IdP to sync users and groups. To get started, you’ll need to add an integration to sync users and resources, such as Okta.

To add an Okta integration:

1. Navigate to the Integrations page.
2. Select Add integration.
3. Select Okta.
4. Enter the Okta domain base URI, such as https://example.okta.com, and API key, which starts with 00.
5. Select Create integration.

Oblique will automatically start syncing users and groups from Okta in “Pull” mode, which means that Okta remains the source of truth for these objects.

Create a group

Groups are a way to group users together to manage access to resources. You can create either an attribute-based group or a team group.

To create a team group:

1. Navigate to the Groups page.
2. Select Add group.
3. Select Attribute-based group.
4. Under Display name, enter a name for the group.
5. Under Members, select users to add as members of the group.
6. Select Create group.

Manage a resource

Oblique can manage resources in “Push” mode, which means that Oblique is the source of truth for these objects. This is enabled at the resource level, so that you can gradually take over management of resources from the integration.

To take over management of a resource:

1. Navigate to the Resources page.
2. Select the resource you want to manage.
3. From the resource details page, under Management > Mode, select More, then select Push to Okta….
4. Select Confirm.

Oblique is now the source of truth for this resource, and will push any changes in access to Okta.

Grant a group or user access

To grant the group you created access to this resource:

1. Navigate to the Grant access page.
2. Under Subjects, select the group you want to grant access to.
3. Under Resource, select the resource you want to grant access to.
4. Under Expiry, set the expiry date for the entitlement. This can be indefinite, a time period, or a specific date.
5. (Optional) Under Justification, enter a justification for the access.
6. Select Grant access.

Oblique will flatten the set of users in the group and push the access change to Okta.