Teams and Businesses

Connect Azure Active Directory to 1Password SCIM Bridge

Learn how to set up and use 1Password SCIM Bridge to integrate with Azure Active Directory.

Important

Before you can integrate with Azure Active Directory, you’ll need to set up and deploy 1Password SCIM Bridge. To use the SCIM bridge with Azure Active Directory, the administrator managing the SCIM application must have a premium subscription.

 

With 1Password Business, you can integrate 1Password with Azure Active Directory (Azure AD) to automate many common administrative tasks:

Provision users

  • Create users: Assigned users and groups will be provisioned to 1Password.
  • Update user attributes: Changing user attributes in your directory will change the mapped attributes in 1Password.
  • Deactivate users: Disabling a user or removing their assignment in Azure AD will suspend the user in 1Password.

Manage groups

  • Assign groups: Assign groups from your directory to sync them to 1Password or manage existing 1Password groups in Azure AD.

To get started, sign in to your account on the Microsoft Azure portal  and follow these steps.

Step 1: Add 1Password Business as a custom application

To add 1Password Business as a custom application in Azure AD:

  1. Click Azure Active Directory, then select “Enterprise applications”  in the sidebar.
  2. Click “New application”, then click “Create your own application”.
  3. Enter “1Password Business” for the name of the app and select “Integrate any other application you don’t find in the gallery (Non-gallery)”. Then click Create.

You’ll see the details of the application you just created. Continue to the next section to configure it.

Step 2: Configure the application

On the 1Password Business application details page:

  1. Click “Users and groups” in the sidebar, then add the users and groups you want to provision to 1Password.

  2. Click Provisioning in the sidebar, then click Get Started.

  3. Set Provisioning Mode to Automatic.

  4. Enter your Tenant URL and Secret Token.

    Tenant URL: the URL of your SCIM bridge (not your 1Password account sign-in address). For example: https://scim.example.com

    If you don’t know your URL, make sure you’ve set up and deployed the SCIM bridge.

    Secret Token: the bearer token for your SCIM bridge

    Learn what to do if you don’t have your bearer token.

  5. Click Test Connection, then click Save and click X (Close) in the top right.

  6. Click Edit Provisioning.

  7. If you want to use custom attribute mappings, click Mappings and refer to the default mappings below.

  8. Set Provisioning Status to On and click Save.

The Provisioning page with Provisioning Mode set to Automatic, the Tenant URL and Secret Token, and Provisioning Status set to On

Settings

To manage assigned users and groups, click “Users and groups”.

To turn off synchronization, set Provisioning Status to Off and click Save.

Learn more in the Azure AD Documentation.  

Next steps

If you have existing groups in 1Password that you want to sync with Azure AD, add them to the groups managed by provisioning. Click View Details in the setup assistant or click Integrations in the sidebar and choose Manage. Click Manage in the Managed Groups section, then select the groups to sync.

If you’ve previously used the SCIM bridge, make sure to select any groups that were already synced with Azure AD. This will prevent problems syncing with your identity provider, including duplicate groups.

Appendix: Attribute mappings

The following are the default user attribute mappings for the 1Password Business application in Azure AD:

1Password attributeAzure AD attributeDescription
userNameuserPrincipalName (UPN)The team member’s username and email address.
displayNamedisplayNameTheir full name.
name.givenNamegivenNameTheir first name.
name.familyNamesurnameTheir last name.
preferredLanguagepreferredLanguageTheir default language for 1Password.

Learn how to customize user provisioning attribute-mappings in Azure AD. 

Still need help?

If this article didn't answer your question, contact 1Password Support.

Published: