Businesses

Team members: Get started with 1Password SSO and Okta

Learn how to unlock 1Password with Okta.

Important

This feature is only available to beta participants.

With 1Password Business, you can use single sign-on (SSO) authentication to unlock 1Password with Okta.

If you’re new to 1Password, learn how to join your team. If you already use 1Password and are asked to sign in with Okta, learn how to switch from an account password and Secret Key to unlock with Okta.

Join your team

To get started, click the link in your invitation email to join your team.

  1. Click “Sign in with Okta”.
  2. Enter your Okta username and password and click Sign In.

You’ll see “Sign in with Okta” whenever you unlock 1Password. Always use your Okta username and password to unlock 1Password.

If you want to use 1Password on multiple devices, follow the steps to Authorize additional devices

Switch to unlock with Okta

If you already use 1Password and your team switches to unlock with Okta, you’ll receive an email notification.

To get started, click the link in the “New sign-in required” email you receive from 1Password.

  1. Sign in to 1Password with your account password.
  2. You’ll see an SSO Migration pop-up. Click “Start new sign in”.
  3. Click “Sign in to Okta”.
  4. Sign in with your Okta username and password.
  5. You’ll be taken back to 1Password and see a “Sign in with Okta” button instead of a password field.
Migrate to sign in with Okta

You’ll unlock 1Password with your Okta username and password from now on. You won’t need your Secret Key, account password, or Emergency Kit to sign in.

Authorize additional devices

Important

During the beta period, Unlock with Okta is only available on 1Password.com and the 1Password browser extensions.

  1. On the new device you want to authorize, sign in to your account on 1Password.com.

    You'll be prompted to enroll your new device by submitting a code.

  2. On an exisiting trusted device, sign in to your account on 1Password.com.
  3. Click your name in the top right and choose My Profile.
  4. Click View Code next to the new device listed under Pending Devices.
  5. On the new device, enter the verification code and click Submit.

After unlocking your account on the new device, it will be listed as an Authorized Device and can be used to verify additional devices, unless you indicated it was a public or shared computer.

Rotate device key

If you want to rotate your device key for any reason, follow the steps below to deauthorize the device, then authorize the device again. Deauthorization will remove the existing key and re-authorizing will generate a new one.

  1. Click your name in the top right and choose My Profile.
  2. Scroll down and click next to the device, then choose Deauthorize Device.
Published: