1Password SCIM bridge

With 1Password Business, you can automate many common administrative tasks using the 1Password SCIM bridge. It uses the System for Cross-domain Identity Management (SCIM) protocol to connect 1Password with your existing identity provider, like Azure Active Directory or Okta, so you can:

• create users and groups (including automated account confirmation),
• grant and revoke access to groups,
• and suspend deprovisioned users

With this 1-Click App, you’ll quickly set up and deploy the SCIM bridge on a cluster in your own environment, so the encryption keys for your account are only available to you and no one else. To set up and deploy the SCIM bridge, you’ll need:

• administrative access in 1Password Business
• this 1-Click App with publicly accessible static LoadBalancer IP address
• a DNS record to allow for encrypted (HTTPS) communication to the SCIM bridge

Software Included

Creating an App using the Control Panel

Click the Deploy to DigitalOcean button to install a Kubernetes 1-Click Application. If you aren’t logged in, this link will prompt you to log in with your DigitalOcean account.

Creating an App using the API

In addition to creating 1Password SCIM bridge using the control panel, you can also use the DigitalOcean API. As an example, to create a 3 node DigitalOcean Kubernetes cluster made up of Basic Droplets in the SFO2 region, you can use the following doctl command. You need to authenticate with doctl with your API access token) and replace the $CLUSTER_NAME variable with the chosen name for your cluster in the command below.

doctl kubernetes clusters create --size s-4vcpu-8gb $CLUSTER_NAME --1-clicks op-scim-bridge

Getting Started After Deploying 1Password SCIM bridge

After deploying the 1Password SCIM bridge, navigate to the IP address of the load balancer created by Kubernetes using your web browser, and follow the on-screen instructions. For more details on how to deploy and utilize your 1Password SCIM bridge app, you can read more at https://support.1password.com/scim-deploy-digitalocean/.

Refer to https://support.1password.com/scim if you have any issues, and contact support+business@1password.com if you have any questions.