Teams and business

If you’re having trouble configuring Unlock with SSO

Get help when you’re having trouble setting up Unlock with SSO in 1Password.

If you need to change a team member’s email address

If you also use 1Password automated provisioning, do not change a suspended team member’s email address. Some identity providers don’t sync email changes for suspended users. If you reactivate a suspended team member after changing their email address, the SCIM bridge may treat them as a new user. This will cause issues when they try to unlock with SSO.

Learn how to change a team member’s email address if you use unlock with SSO.

If you need to switch identity providers

If you need to switch to a different identity provider after you set up Unlock with SSO:

  1. Sign in to your account on 1Password.com.
  2. Select Policies in the sidebar, then select Manage policies under Configure Identity Provider.
  3. Select Edit Configuration.
  4. Follow the steps to set up Unlock with SSO for your identity provider.

If a team member keeps using 1Password 7

If one of your team members continues to use 1Password 7 after you add them to a group that unlocks with SSO, the data in the app may become out of sync with their account. To resolve this issue:

  1. Temporarily remove the team member from the group that unlocks with SSO.
  2. Ask them to unlock 1Password 7 so their data syncs.
  3. Ask them to upgrade to 1Password 8.
  4. Add them back to a group that unlocks with SSO.

If you manage Microsoft Edge on mobile devices with Intune

If you manage Microsoft Edge on mobile devices with Intune, you’ll need to update your data protection policy to allow the 1Password URL scheme so your team members can sign in with SSO.

  1. In Intune, go to your app protection policy settings for iOS or Android.
  2. Beside “Select apps to exempt”, select Select, then fill out the fields:
    • Name: Enter 1Password.
    • Value: For iOS, enter onepassword. For Android, enter com.onepassword.android.
  3. Save your changes.
  4. Test your policy. Sign in with SSO in the 1Password app on a managed device with Microsoft Edge to make sure it works.

If you’re an MSP technician

If you’re an MSP technician and want to set up Unlock with SSO for a managed company account, follow these steps:

  1. Invite yourself to the account as a team member.
  2. Add your new user to the Administrators group.
  3. Sign in to your new admin account and follow the steps to set up SSO.

If you still need help

If you’re still having trouble unlocking 1Password with SSO, contact 1Password Support with a description of the problem.


Published: