Teams and Businesses

Update 1Password SCIM Bridge

Learn how to get and deploy the latest version of 1Password SCIM Bridge for your environment.

If you receive an email notification about a new version or upcoming deprecation of 1Password SCIM Bridge, follow the instructions for your deployment environment to update it:

If you received an email about your SCIM bridge version being deprecated, update the SCIM bridge within 90 days. If you don’t update in that time, your existing accounts will still work, but 1Password will no longer sync with your identity provider.

If you need help updating the SCIM bridge, contact a 1Password Business representative.

Docker or Kubernetes

If you followed the instructions from the scim-examples repository on GitHub to deploy the SCIM bridge, learn how to update the SCIM bridge on Docker or Kubernetes.

If you customized your SCIM bridge deployment

If you customized your SCIM bridge deployment, update the deployment configuration file with the new version and then apply the change:

  1. Visit 1Password SCIM Bridge on Docker Hub and note the tag with the most recent version number.

  2. Edit your YAML configuration file and update it with the version number you noted:

    Deployment environmentEdit this YAML file
    Dockerdocker-compose.yml
    Kubernetesop-scim-deployment.yaml
  3. Run one of the following commands to apply the update:

    Deployment environmentRun this command
    Docker Composedocker-compose up
    Docker Swarmdocker stack deploy
    Kuberneteskubectl apply

Amazon Web Service Elastic Container Service Fargate

If you followed the instructions from the scim-examples repository on GitHub to deploy the SCIM bridge, learn how to update the SCIM bridge on AWS ECS Fargate using Terraform.

If you customized your SCIM bridge deployment

If you customized your SCIM bridge deployment, update the deployment configuration file with the new version and then apply the change:

  1. Open the task-definitions/scim.json file and edit the following line:

     "image": "1password/scim:v2.0.x"
    
  2. Change v2.0.x to the latest version listed in the 1Password SCIM Bridge release notes.

  3. Run the following commands to reapply your Terraform settings:

     terraform plan -out=./op-scim.plan
     terraform apply ./op-scim.plan
    

Google Cloud Platform

Use the Cloud Shell on Google Cloud Platform to update the SCIM bridge in place:

  1. Visit the list of Clusters on Google Cloud PlatformĀ  and click the cluster you use for the SCIM bridge.

  2. Click Connect and choose “Run in Cloud Shell”.

  3. Allow any API permissions, then press Return to connect to the cluster.

  4. Copy this command and paste it into the shell window, then press Return:

     kubectl set image deployment/op-scim-bridge-1-op-scim-bridge op-scim-bridge=1password/scim:v2.4.0
    

    Change ā€œv2.4.0ā€ in the command to the latest version.

    The Application page for your SCIM bridge will only reflect the version of the SCIM bridge you initially installed through the Marketplace. You can safely ignore that version mismatch if the ā€˜kubectl set imageā€™ command was successful.

If you canā€™t update the SCIM bridge in-place, you can also redeploy it. The bridge doesnā€™t maintain state information, so this wonā€™t impact your identity provider or 1Password account, aside from downtime while you redeploy it.

Before you redeploy the bridge, pause provisioning with your identity provider. Then follow these steps:

  1. Release the “SCIM bridge by 1Password” app’s static IP addressĀ  in Google Cloud Platform.
  2. Visit the Google Kubernetes Engine consoleĀ  , click the “SCIM bridge by 1Password” app instance, then click Delete.
  3. Install the SCIM bridge againĀ  in the same project using the same cluster.
  4. Promote the app’s ephemeral IP address to a static IP address.Ā 
  5. Update the DNS record for the SCIM bridge to point to the new static IP address.
  6. Connect the SCIM bridge to your 1Password account.
  7. Connect your identity provider and turn on provisioning.

DigitalOcean

Install the updated DigitalOcean Marketplace app over the old one:

  1. Visit 1Password SCIM Bridge on DigitalOcean MarketplaceĀ  and click Install App.
  2. Choose the cluster where the SCIM bridge is deployed, then click Install.

    The installation may take up to 10 minutes to complete.

  3. Visit the SCIM bridge domain in your browser and enter your OAuth bearer token to confirm that the update was successful.

If you canā€™t update the SCIM bridge in-place, you can also redeploy it. The bridge doesn’t maintain state information, so this won’t impact your identity provider or 1Password account, aside from downtime while you redeploy it.

Before you redeploy the bridge, pause provisioning with your identity provider. Then follow these steps:

  1. Visit the DigitalOcean Kubernetes consoleĀ  , choose the cluster where the SCIM bridge is deployed, then click Kubernetes Dashboard.
  2. Choose Cluster > Namespaces and delete the op-scim-bridge namespace.
  3. Install the SCIM bridge againĀ  using the same cluster.

    The installation can take up to 10 minutes to complete.

  4. Go back to the Kubernetes Dashboard for your cluster.
  5. Select “Services” in the Service section.
  6. Find op-scim-bridge-svc in the list and copy the IP address shown under the “External Endpoints”.
  7. Update the DNS record to match the IP address you just copied.
  8. Connect the SCIM bridge to your 1Password account.
  9. Connect your identity provider and turn on provisioning.

Get help

Get help with the SCIM bridge, like if you lose your bearer token or session file, or if you use two-factor authentication.

For more information about the SCIM bridge, contact your 1Password Business representative. To get help and share feedback, join the discussion with the 1Password Support Community.

Learn more

Still need help?

If this article didn't answer your question, contact 1Password Support.

Published: