Teams and Businesses

Get started with 1Password Unlock with SSO

Learn how to unlock 1Password with your identity provider.

Tip

If you’re a 1Password administrator, learn how to set up Unlock 1Password with SSO for your team.

If your team’s 1Password Business account has Unlock with SSO turned on, you can use single sign-on (SSO) authentication to unlock 1Password with your identity provider instead of your account password and Secret Key.

Before you begin

Before you can unlock 1Password with SSO, you’ll need to install the latest version of 1Password:

When you have these prerequisites, follow the steps below.

Join your team

To get started, open the invitation email to join your team, then click the link to set up 1Password with your identity provider.

  1. Click “Sign in with [your identity provider]”.
  2. Enter your identity provider username and password and click Sign In.

You’ll see “Sign in with [your identity provider]” whenever you unlock 1Password. Always use your identity provider username and password to unlock 1Password.

If you want to use 1Password on multiple devices, follow the steps to set up additional trusted devices.

Switch to Unlock with SSO

If you already use 1Password and your team switches to Unlock with SSO, you’ll receive an email notification.

To get started, click the link in the “New sign-in required” email you receive from 1Password.

On 1Password.com

Important

Don’t use an incognito or private browser window to set up Unlock with SSO. You may temporarily lose access to your account and need to be recovered by an administrator.

  1. Sign in to your account on 1Password.com.
  2. You’ll see a pop-up letting you know there’s a new way to sign in. Click Start New Sign-In.
  3. Click “Sign in with [your identity provider]”.
  4. Sign in with your identity provider username and password.

    The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.

  5. You’ll be taken back to 1Password where you’ll see a “Sign in with [your identity provider]” button instead of a password field.

In the apps

  1. Open and unlock 1Password with your account password.
  2. You’ll see a pop-up letting you know there’s a new way to sign in. Click Start New Sign-In.
  3. Click “Sign in with [your identity provider]”.
  4. Sign in with your identity provider username and password.

    The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.

  5. You’ll be taken back to 1Password where you’ll see a “Sign in with [your identity provider]” button instead of a password field.
  6. Turn on notifications when prompted to make sure you can quickly set up additional trusted devices in the future.
  1. Open and unlock 1Password with your account password.
  2. You’ll see a pop-up letting you know there’s a new way to sign in. Tap Start New Sign-In.
  3. Tap “Sign in with [your identity provider]”.
  4. Sign in with your identity provider username and password.

    The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.

  5. You’ll be taken back to 1Password where you’ll see a “Sign in with [your identity provider]” button instead of a password field.
  6. Tap “Enable notifications” to make sure you can quickly set up additional trusted devices in the future.
  1. Open and unlock 1Password with your account password.
  2. You’ll see a pop-up letting you know there’s a new way to sign in. Click Start New Sign-In.
  3. Click “Sign in with [your identity provider]”.
  4. Sign in with your identity provider username and password.

    The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.

  5. You’ll be taken back to 1Password where you’ll see a “Sign in with [your identity provider]” button instead of a password field.
  6. Turn on notifications when prompted to make sure you can quickly set up additional trusted devices in the future.
  1. Open and unlock 1Password with your account password.
  2. You’ll see a pop-up letting you know there’s a new way to sign in. Tap Start New Sign-In.
  3. Tap “Sign in with [your identity provider]”.
  4. Sign in with your identity provider username and password.

    The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.

  5. You’ll be taken back to 1Password where you’ll see a “Sign in with [your identity provider]” button instead of a password field.
  6. Tap “Enable notifications” to make sure you can quickly set up additional trusted devices in the future.
  1. Open and unlock 1Password with your account password.
  2. You’ll see a pop-up letting you know there’s a new way to sign in. Click Start New Sign-In.
  3. Click “Sign in with [your identity provider]”.
  4. Sign in with your identity provider username and password.

    The email address you use to sign in to 1Password must match the email address you use to sign in to your identity provider.

  5. You’ll be taken back to 1Password where you’ll see a “Sign in with [your identity provider]” button instead of a password field.
  6. Turn on notifications when prompted to make sure you can quickly set up additional trusted devices in the future.

You’ll unlock 1Password with your identity provider username and password from now on. You won’t need your Secret Key, account password, or Emergency Kit to sign in.

Next steps

Get help

If you’re asked to enter an account password and Secret Key when you accept the invitation to join your team, wait 30 minutes and try again.

If you want to sign in to 1Password.com in your browser on a mobile device, you’ll need to use the 1Password app on a different device to approve the sign in.

Get help if you’re having trouble unlocking 1Password with SSO.

Still need help?

If this article didn't answer your question, contact 1Password Support.

Published: