Teams and business

Set up 1Password automated provisioning with OneLogin (beta)

Learn how to set up and use 1Password automated provisioning with OneLogin.

With 1Password Business, you can integrate 1Password with OneLogin to automate many common administrative tasks:

Provision

  • Create users: Provisioned users will be created in 1Password.

    To sync groups from your directory to 1Password, use OneLogin roles.

  • Update user attributes: Changing user attributes in your directory will change the mapped attributes in 1Password.
  • Deactivate users: Deactivating a user or disabling the user’s access to 1Password in OneLogin will suspend the user in 1Password.

Import

  • Import users and groups: Existing 1Password users and groups can be imported and linked to existing OneLogin objects.

Manage groups

  • Use roles: OneLogin roles can synced to 1Password groups. Role changes in OneLogin will be synced to 1Password.

To get started, sign in to your account on OneLogin.com  , select Administration in the top right, and follow these steps.

Before you begin

Before you can integrate 1Password with OneLogin, you’ll need to:

  • Be in the Owners or Administrators group in your 1Password Business account.
  • Make sure all existing 1Password team member email address domains are in the allowed domains list. Public domains, such as gmail.com, aren’t currently supported.

Step 1: Turn on provisioning in 1Password

  1. Sign in to your account on 1Password.com.
  2. Select Integrations in the sidebar.
  3. Select OneLogin in the User Provisioning section.
  4. Select Set up hosted provisioning.
  5. Save your credentials in 1Password in case you need them later, then select Next.
  6. Leave this page open and continue to step 2.

Step 2: Add the 1Password application to OneLogin

These steps were recorded in April 2026 and may have changed since. Refer to the OneLogin documentation  for the most up-to-date steps.

To add the 1Password Business application to OneLogin:

  1. Select Applications, then select Add App.
  2. Search for 1Password Business and select it. You’ll see the Portal settings for the integration, including the default application label 1Password Business.
  3. Select Save.

You’ll see the settings for the application you just created.

Step 3: Configure the application

On the 1Password Business application settings page, select Configuration. Then follow these steps.

3.1: Set up API connection

  1. Fill out the following fields:
    • SCIM Base URL: Copy and paste your SCIM URL from the hosted provisioning setup page (not your 1Password account sign-in address). Do not include a trailing slash. For example: https://provisioning.1password.com/scim/v2.
    • SCIM Bearer Token: Copy and paste your bearer token from the hosted provisioning setup page.
  2. Select Enable > Save.
The API Connection settings for the Application with the API connection turned on

Important

Confirm that your base URL uses https and does not include a forward slash (/) at the end. For example: https://scim.example.com

3.2: Set up provisioning to 1Password

  1. Select Provisioning in the sidebar.
  2. Turn on Enable provisioning and review the other settings.
  3. Choose Suspend or Delete under “When users are deleted in OneLogin, or the user’s app access is removed, perform the below action”.
  4. Select Suspend under “When user accounts are suspended in OneLogin, perform the following action”.
  5. If you want to customize the attribute mappings, refer to the default mappings below.
  6. Select Save.
Provisioning settings, with Enable provisioning turned on

Next steps

When you turn on provisioning, existing 1Password users will be linked to OneLogin users if their email address matches. If their email address is different, they’ll be invited to 1Password again, so make sure any affected team members update their email address before you turn on provisioning.

If a team member hasn’t accepted their invite after 2 days, they’ll receive a reminder email.

Manage your settings

OneLogin roles can be mapped to 1Password groups. Select Rules in the OneLogin sidebar to start mapping roles. Learn more about how you can create mappings to automatically assign roles to new users. 

To get help pushing roles and their memberships to 1Password when assigned, contact OneLogin Support. 

Get help

If users and groups aren’t being provisioned, make sure provisioning is turned on in your 1Password account:

  1. Sign in to your account on 1Password.com.
  2. Select Integrations in the sidebar.
  3. Select Hosted Provisioning.
  4. Make sure Sync 1Password with my identity provider is turned on.

Appendix: Attribute mappings

The following are the default user attribute mappings for the 1Password Business application in OneLogin:

1Password attributeOneLogin attributeDescription
EmailEmailThe team member’s username and email address.
Display NameMacro : {firstname} {lastname}Their full name.
First NameFirst NameTheir first name.
Last NameLast NameTheir last name.

Learn how to create a mapping in OneLogin. 


Published: