> ## Documentation Index
> Fetch the complete documentation index at: https://stackone-hub-docs-confluence-api-token-update.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# 1Password

> Follow these steps to connect 1Password via the StackOne Hub successfully.

<Warning>
  Ensure you have Administrator privileges within your 1Password account.
</Warning>

If you've been directed to StackOne to integrate with 1Password, the following steps will help you understand the process and any necessary actions to configure successful integration.

## Introduction

1Password requires account holders to deploy an independent SCIM Bridge to support User data and provisioning via API.

Learn more about the setup requirements and deployment process in [1Password Support](https://support.1password.com/scim/). An Identity Provider (IDP) is not required to configure this integration, but note that the SCIM Bridge setup may vary for connection with different IDPs.

Your SCIM Bridge must be fully configured for this integration. You can check the status of your SCIM bridge at `your-scim-bridge-url/app/status`.

<Warning>
  **Google Workspace** limitation: 1Password currently does not support IAM API endpoints for SCIM Bridges connected to Google Workspace for User Provisioning.

  As a workaround, a second 1Password SCIM Bridge can be deployed to service this IAM connection.

  This second SCIM Bridge must use the same *scimsession* file, and must not be connected to Google Workspace.
</Warning>

## Enable 1Password User Provisioning

<Steps>
  <Step title="Log in to your 1Password dashboard">
    Log in to your [1Password account](https://my.1password.com/signin) with your Administrator credentials.
  </Step>

  <Step title="Enable User Provisioning">
    Navigate to Integrations, and select your listed Identity Provider to proceed. If you do not wish to connect to an IDP, select Okta to be used as the default.

    <Frame>
      <img className="rounded-md" style={{ margin: '0 auto', border: '1px solid #efefef' }} alt="User Provisioning" src="https://mintcdn.com/stackone-hub-docs-confluence-api-token-update/zHY41-o1JHEiZkNS/images/1password/image1.png?fit=max&auto=format&n=zHY41-o1JHEiZkNS&q=85&s=0c76799fa28f43bb72cc186eea1cd11a" width="1912" height="682" data-path="images/1password/image1.png" />
    </Frame>
  </Step>

  <Step title="Set up User Provisioning">
    Based on how your SCIM Bridge will be deployed, select the listed deployment method, then click the Next button.

    <Frame>
      <img className="rounded-md" style={{ margin: '0 auto', border: '1px solid #efefef' }} alt="Set Up User Provisioning" src="https://mintcdn.com/stackone-hub-docs-confluence-api-token-update/zHY41-o1JHEiZkNS/images/1password/image2.png?fit=max&auto=format&n=zHY41-o1JHEiZkNS&q=85&s=188a5bd3386fbd47c60ccff136c93194" width="1389" height="868" data-path="images/1password/image2.png" />
    </Frame>
  </Step>

  <Step title="Save Credentials">
    Download and save your **scimsession** file securely, which will be used when deploying your SCIM Bridge to connect with 1Password.

    Download and store your **bearer token** securely, which both an IDP and this integration will use to connect to the SCIM Bridge.

    <Frame>
      <img className="rounded-md" style={{ margin: '0 auto', border: '1px solid #efefef' }} alt="Save Credentials" src="https://mintcdn.com/stackone-hub-docs-confluence-api-token-update/zHY41-o1JHEiZkNS/images/1password/image3.png?fit=max&auto=format&n=zHY41-o1JHEiZkNS&q=85&s=ea39a88628e3781d90e98fe431308b4b" width="1389" height="956" data-path="images/1password/image3.png" />
    </Frame>

    If needed, click the button for your deployment type and follow the instructions to deploy.

    Press the Next button to proceed.
  </Step>

  <Step title="(optional) Set up Health Monitoring">
    1Password offers an optional alert system to notify you connection issues with your SCIM Bridge.

    To set up, enable "Turn on health monitoring" and enter the publicly-addressable URL for your SCIM Bridge deployment.

    Click the Next button to proceed.

    <Frame>
      <img className="rounded-md" style={{ margin: '0 auto', border: '1px solid #efefef' }} alt="Health Monitoring" src="https://mintcdn.com/stackone-hub-docs-confluence-api-token-update/zHY41-o1JHEiZkNS/images/1password/image4.png?fit=max&auto=format&n=zHY41-o1JHEiZkNS&q=85&s=e0455fd1e66146397f7aa24e57eaa754" width="1388" height="872" data-path="images/1password/image4.png" />
    </Frame>
  </Step>

  <Step title="(optional) Connect your IDP to the SCIM Bridge">
    If you wish to connect an IDP to your SCIM Bridge, click the tile for your IDP to view configuration instructions.

    Click the "View details" button to open the new User Provisioning configuration profile.
  </Step>

  <Step title="User Provisioning Configuration">
    On this page in 1Password, you can adjust multiple User Provisioning settings, generate new credentials, or delete the setup.

    <Frame>
      <img className="rounded-md" style={{ margin: '0 auto', border: '1px solid #efefef' }} alt="User Provisioning Configuration" src="https://mintcdn.com/stackone-hub-docs-confluence-api-token-update/zHY41-o1JHEiZkNS/images/1password/image5.png?fit=max&auto=format&n=zHY41-o1JHEiZkNS&q=85&s=8b5181f33f53b30b9aaa8c29c6c15491" width="1396" height="810" data-path="images/1password/image5.png" />
    </Frame>
  </Step>
</Steps>

## Deploy 1Password SCIM Bridge

<Steps>
  <Step title="Set up your 1Password SCIM Bridge">
    See 1Password's official [SCIM Bridge deployment examples repo](https://github.com/1Password/scim-examples) for specific setup instructions across different deployment options.

    This will require the **scimsession** file generated from enabling User Provision in your 1Password account.

    Note the publicly-addressable URL (example: `https://op-scim.mydomain.org`) of this deployment, as it is required for establishing this connection.
  </Step>
</Steps>

## Connecting with StackOne

<Steps>
  <Step title="Enter Credentials">
    Upon reaching the Link Account page, enter your credentials from the previous steps:

    <ul>
      <li>SCIM Bridge URL: the publicly-addressable URL of your SCIM Bridge deployment. If you have an IDP connected, this will be the same URL entered in the IDP's 1Password configuration.</li>
      <li>SCIM Bearer Token: the **bearer token** displayed when initially enabling User Provisioning in 1Password</li>
    </ul>

    Proceed by clicking the Connect button.

    <Frame>
      <img className="rounded-md" style={{ margin: '0 auto', border: '1px solid #efefef' }} alt="Link Account" src="https://mintcdn.com/stackone-hub-docs-confluence-api-token-update/zHY41-o1JHEiZkNS/images/1password/image6.png?fit=max&auto=format&n=zHY41-o1JHEiZkNS&q=85&s=0bd732c3e30949a4ef6032507d0fbf4e" width="487" height="639" data-path="images/1password/image6.png" />
    </Frame>
  </Step>
</Steps>

<br />

Congratulations, you're all set! If you face any issues with the steps mentioned above,
please contact us by emailing [integrations@stackone.com](mailto:integrations@stackone.com). We're always here to assist you!

## Available data

This integration has the following [IAM Resources](https://docs.stackone.com/reference/iam_list_users) available from the provider:

<ul>
  <li>Users</li>
  <li>Groups</li>
</ul>

## Useful Links

<Card title="1Password Support - SCIM Bridge" icon="link" href="https://support.1password.com/scim/">
  [https://support.1password.com/scim/](https://support.1password.com/scim/)
</Card>

<Card title="1Password SCIM Bridge Github Repo" icon="link" href="https://github.com/1Password/scim-examples">
  [https://github.com/1Password/scim-examples](https://github.com/1Password/scim-examples)
</Card>