Discover and take ownership of accounts with SaaS Manager

Learn how you can manage access to work-related accounts when you link your 1Password business account to 1Password SaaS Manager.

With 1Password Business, you can choose to connect your account to 1Password SaaS Manager to access an Account Risk Report. This report contains a list of the accounts your organization has saved in 1Password that use work-related email domains. You can then take ownership of those credentials and manage access to them from a central place.

Tip

If you use 1Password Business without SaaS Manager, learn how to take ownership of credentials in 1Password Business.

Before you begin

Make sure you’re part of a group that can manage policies in your 1Password account, then follow these steps:

Step 1: Sign up for SaaS Manager

To sign up for SaaS Manager:

  1. Sign in to your business account on 1Password.com.
  2. On the Dashboard, select Learn more below the SaaS Manager banner.
  3. Select Start free trial and follow the onscreen instructions.

    If you already have a SaaS Manager account, learn more about how to link it.

Step 2: Turn on app discovery

Before you can take ownership of credentials, you’ll need to allow 1Password to identify work-related items in your account’s vaults and send the results to SaaS Manager.

  1. Sign in to your account on 1Password.com.
  2. Select Policies in the sidebar, then select Sharing and permissions.
  3. Enter the email domains your organization uses.
  4. In the “Discover work items and apps” section, turn on Let SaaS Manager discover apps.
  5. Select Save.

After you’ve turned on app discovery, you can review the Account Risk Report and take ownership of unmanaged accounts.

Tip

The email domains you enter above determine which accounts appear in the Account Risk Report. They don’t limit what app discovery collects overall. Learn more about what gets discovered.

Review the Account Risk Report

To see a list of the accounts in 1Password that use work-related email domains, open the Account Risk Report in SaaS Manager:

  1. Sign in to your account on 1Password.com.
  2. Select Password Manager in the top left, then select SaaS Manager.
  3. Select Reports in the sidebar, then select Account Risk Report.

You can sort the report by specific fields, filter the report to condense the list, and optionally assign a risk level to each app entry.

Take ownership of accounts

Tip

The first time you take ownership of an account, you’ll need access to the DNS settings for the domain it uses so you can verify ownership. After setup, you can open the DNS page to check the state of your DNS configuration.

From the Account Risk Report, you can choose to take ownership of accounts within your organization.

  1. From the Account Risk Report in SaaS Manager, find the app you want to take ownership of, then select Review accounts beside it.
  2. Select Take ownership beside an account, then follow the onscreen instructions.

After you transfer the ownership of an account, SaaS Manager will move the account into a Managed Logins vault.

Assign and manage credentials

After you’ve taken ownership of accounts, you can manage and remove team members’ access to them in SaaS Manager:

  1. From the Account Risk Report in SaaS Manager, select the Manage account ownership tab.
  2. Find an account, then select Manage account beside it.
  3. Select Manage account > Edit access.
  4. Select the Users or Groups tab and select the people you’d like to have access to the account. To remove access, select the minus button.
  5. When you’re done making changes, select Save.

Use company-managed items

Team members who have access to a managed login can still sign in to the account the same way they did before. They’ll see a Managed Logins vault in 1Password with the accounts they can use.

Team members can fill managed logins with the 1Password browser extension, but they can’t view, edit, or copy the item’s details.

At this time, team members can’t access managed logins in 1Password for Android. On iPhone and iPad, they can use 1Password for Safari to fill managed logins in the browser.

Get help

If items and apps aren’t being discovered

When you turn on “Let SaaS Manager discover apps”, you’ll see the item count grow slowly over time. This happens because 1Password only syncs the vault items that change after your first sync. To trigger a full sync so 1Password has a complete list of items, follow these steps:

  1. Sign in to your account on 1Password.com.
  2. Select Policies in the sidebar, then select Sharing and permissions.
  3. Scroll down to the “Discover work items and apps” section.
  4. Remove one of your existing work-specific email domains, then select Save.
  5. Add the domain back to the list, then select Save.

Turn off app discovery

When you turn off “Let SaaS Manager discover apps”, 1Password stops generating new snapshots, but it doesn’t delete apps that SaaS Manager has already discovered.

To remove an already-discovered item, delete it directly in SaaS Manager. Keep in mind that:

  • Items discovered from an Employee vault stay deleted.
  • Items discovered from a shared vault can reappear later if a team member or group is added back to the shared vault. This happens because SaaS Manager can associate the item with the newly added user or group.

Bulk deletion of previously discovered items is currently not supported. If you need to remove a large number of items, contact 1Password support.

Learn more


Published: