Skip to content
Request a demoGet a demo
All integrations
1Password

1Password (SCIM) security: audit vault seats and automate offboarding.

Connect 1Password Business via SCIM to inventory active seats, catch orphan or departed-employee vault accounts, run auditable User Access Reviews, and deprovision revoked users.

Request a demo See the workflow

1Password Business SCIM bridge · Users, Access Reviews & Deprovisioning

Capabilities

What this integration covers.

01

Continuous vault seat inventory.

Reconcile every 1Password Business member against your primary identity directory.

02

Catch departed and orphan accounts.

Flag former employees, contractors, or unlinked emails that still retain 1Password membership.

03

Audit-ready reviews & deprovisioning.

Run delegated User Access Reviews with signed PDF/CSV exports and deprovision revoked 1Password seats.

Example workflow

Certify and revoke stale 1Password seats.

How the integration supports a specific security task.

  1. 01

    Sync 1Password SCIM

    Elba imports active 1Password members through your SCIM bridge and flags directory mismatches.

  2. 02

    Review with managers

    Reviewers certify or reject vault memberships directly from Slack, Teams, or the Elba console.

  3. Deprovision & export proof

    Rejected accounts are deprovisioned via SCIM and logged in your ISO 27001 / SOC 2 PDF or CSV report.

Related capability

Explore this part of the platform.

Explore apps & access

Before you connect

Coverage, permissions, and requirements.

Connects via SCIM (1Password Business with deployed 1Password SCIM Bridge). Synchronizes user account records and supports account deprovisioning; Elba never accesses vault items or passwords.

Explore security & privacy
Does Elba ever read passwords or vault items stored in 1Password?

Never. The 1Password SCIM connection only reads user directory attributes and executes SCIM user deprovisioning; vault contents and master keys remain completely inaccessible to Elba.

Can Elba automatically remove revoked 1Password users after an Access Review?

Yes. 1Password is a verified remediation-enabled source in Elba, allowing administrators to deprovision eligible accounts directly from a completed User Access Review or offboarding workflow.

What 1Password plan is required for this integration?

1Password Business (or Enterprise) with an active 1Password SCIM Bridge endpoint is required to synchronize users and deprovision accounts via SCIM.

Coverage and requirements
  • Requires 1Password Business with a configured 1Password SCIM Bridge; consumer or Teams plans without SCIM are not supported.
  • This integration covers user/seat inventory, identity-gap detection, User Access Reviews, and supported account deprovisioning; it does not perform file DLP or OAuth scope revocation inside 1Password.
  • Account removal applies only to eligible non-owner accounts supported by the provider API or SCIM endpoint.

Other applications

Review more integrations.

All integrations

Okta

Directory sync, read-only Okta app assignments, and apps used outside Okta.

Google Workspace

Directory sync, third-party app grants, and Drive sharing permissions.

GitLab

Audit GitLab group memberships, run engineering Access Reviews, and remove stale users.

Discuss your requirements

Evaluate Elba for 1Password.

Review the available capabilities, required permissions, and setup for your environment with our team.

Request a demo