Tip
If you’re a 1Password administrator, learn how to set up Unlock 1Password with SSO for your team.
If your team’s 1Password Business account has Unlock with SSO turned on, you can use single sign-on (SSO) authentication to unlock 1Password with your identity provider instead of your account password and Secret Key.
Before you begin
Before you can unlock 1Password with SSO, you’ll need to install the latest version of 1Password:
- 1Password browser extension
- 1Password 8 for iOS or Android
- 1Password 8 for Mac, Windows, or Linux
- 1Password CLI (optional)
When you have these prerequisites, follow the steps below.
Join your team
To get started, open the invitation email to join your team, then click the link to set up 1Password with your identity provider.
- Click Sign in with [your identity provider].
- Enter your identity provider username and password and click Sign In.
You’ll see “Sign in with [your identity provider]” whenever you unlock 1Password. Always use your identity provider username and password to unlock 1Password.
If you want to use 1Password on multiple devices, follow the steps to set up additional trusted devices.
Switch to Unlock with SSO
If you already use 1Password and your team switches to Unlock with SSO, you’ll receive an email notification. To get started, click the link in the setup email you receive from 1Password, then follow these steps.
On 1Password.com
Important
Don’t use an incognito or private browser window to set up Unlock with SSO. You may temporarily lose access to your account and need to be recovered by an administrator.
- Sign in to your account on 1Password.com.
- You’ll see a pop-up letting you know there’s a new way to sign in. Click Get Started.
- Click Sign in with [your identity provider].
- Sign in with your identity provider username and password.
The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.
- You’ll be taken back to 1Password where you’ll see a “Sign in with [your identity provider]” button instead of a password field.
- Set up your other devices to unlock with SSO.
In the apps
- Open and unlock 1Password with your account password.
- You’ll see a pop-up letting you know there’s a new way to sign in. Click Start New Sign-In.
- Click Sign in with [your identity provider].
- Sign in with your identity provider username and password.
The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.
- Turn on notifications when prompted to make sure you can quickly approve new trusted devices in the future.
- Set up your other devices to unlock with SSO.
- Open and unlock 1Password with your account password.
- You’ll see a pop-up letting you know there’s a new way to sign in. Tap Start New Sign-In.
- Tap Sign in with [your identity provider].
- Sign in with your identity provider username and password.
The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.
- Tap Enable notifications to make sure you can quickly approve new trusted devices in the future.
- Set up your other devices to unlock with SSO.
- Open and unlock 1Password with your account password.
- You’ll see a pop-up letting you know there’s a new way to sign in. Click Start New Sign-In.
- Click Sign in with [your identity provider].
- Sign in with your identity provider username and password.
The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.
- Turn on notifications when prompted to make sure you can quickly approve new trusted devices in the future.
- Set up your other devices to unlock with SSO.
- Open and unlock 1Password with your account password.
- You’ll see a pop-up letting you know there’s a new way to sign in. Tap Start New Sign-In.
- Tap Sign in with [your identity provider].
- Sign in with your identity provider username and password.
The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.
- Tap Enable notifications to make sure you can quickly approve new trusted devices in the future.
- Set up your other devices to unlock with SSO.
- Open and unlock 1Password with your account password.
- You’ll see a pop-up letting you know there’s a new way to sign in. Click Start New Sign-In.
- Click Sign in with [your identity provider].
- Sign in with your identity provider username and password.
The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.
- Turn on notifications when prompted to make sure you can quickly approve new trusted devices in the future.
- Set up your other devices to unlock with SSO.
You’ll unlock 1Password with your identity provider username and password from now on. You won’t need your Secret Key, account password, or Emergency Kit to sign in.
Next steps
After you’ve set up unlock with SSO, you can sign in to new devices using SSO.
Get help
If you’re asked to enter an account password and Secret Key when you accept the invitation to join your team, wait 30 minutes and try again.
If you can’t find your verification code, open 1Password where you’ve already signed in.
If you want to sign in to 1Password.com in your browser on a mobile device, you’ll need to use the 1Password app on a different device to approve the sign in.
Get help if you’re having trouble unlocking 1Password with SSO.