Tip
If you don’t use DigitalOcean, you can still automate provisioning in another deployment environment.
With 1Password Business, you can automate many common administrative tasks using 1Password SCIM Bridge. It uses the System for Cross-domain Identity Management (SCIM) protocol to connect 1Password with your existing identity provider, like Google Workspace, JumpCloud, Microsoft Entra ID, Okta, OneLogin, or Rippling.
You can deploy 1Password SCIM Bridge on DigitalOcean with the Marketplace app by following the steps below. Alternatively, you can deploy to the DigitalOcean App Platform, which is a more affordable and customizable deployment option.
Schritt 1: 1Password SCIM Bridge auf DigitalOcean bereitstellen
If you don’t already have a DigitalOcean account, create one. Then follow these steps.
1.1: Erstelle einen Cluster
Die SCIM-Bridge muss innerhalb eines Clusters bereitgestellt werden. Um einen Cluster zu erstellen:
- Visit 1Password SCIM Bridge on DigitalOcean Marketplace and select Install App.
- Select New cluster > Install.
- Scroll down to “Choose cluster capacity”.
- Select Set node pool to autoscale.
- From the “Node plan” menu, select 2 GB total RAM / 2 vCPUs / 60 GB storage.
- Change “Minimum nodes” to 1, then change “Maximum nodes” to 3.
- Scroll to the bottom and select Create Cluster.
Your cluster will now be created. After a few minutes, you’ll receive an email from DigitalOcean to confirm that your load balancer is ready.
1.2: 1Password SCIM Bridge einrichten
Nachdem dein Load Balancer bereit ist:
- Click Networking in the sidebar and choose Load Balancers. You’ll see the IP address for your load balancer.
- Configure a DNS A record for your chosen domain and point it to the IP address of your load balancer. For example:
scim.example.com. - Wait for the DNS to propagate, then navigate to your SCIM bridge domain.
You’ll see 1Password SCIM Bridge Setup page.
Schritt 2: Verbinde die 1Password SCIM Bridge mit deinem 1Password-Konto
2.1: Melde dich bei deinem 1Password-Konto an
Auf der 1Password SCIM Bridge-Setup-Seite:
- Enter the domain name you configured for your load balancer to verify it.
- Click Sign In and follow the onscreen instructions.
Learn what to do if you see the details for an existing provisioning integration.
2.2: Authenticate with 1Password SCIM Bridge
After you complete the setup process, you’ll get a scimsession file and bearer token. Save them both in 1Password in case you need them again.
- Click Install on <yourdomain>. You’ll see the 1Password SCIM Bridge Status page.
- Enter your OAuth bearer token and select Verify.
Wichtig
The bearer token and scimsession file you receive during setup can be used together to access information from your 1Password account. You’ll need to share the bearer token with your identity provider, but it’s important to never share it with anyone else. And never share your scimsession file with anyone at all.
Schritt 3: Verbinde deinen Identitätsanbieter mit der SCIM-Bridge
Wichtig
If you’ve already been using 1Password Business, make sure the email addresses and group names in your 1Password account are identical to those in your identity provider.
- If anyone is using a different email address in 1Password, ask them to change it.
- If you have existing groups in 1Password that you want to sync with groups in your identity provider, adjust the group names in 1Password.
Because 1Password SCIM Bridge provides a SCIM 2.0-compatible web service that accepts OAuth bearer tokens for authorization, you can use it with a variety of identity providers.
Connect to the load balancer where you’ve configured the SCIM bridge (for example: https://scim.example.com) and authenticate using your OAuth bearer token.
Benutzerhandbuch
Erfahre, wie du deinen Identitätsanbieter verbinden kannst:
Google Workspace
JumpCloud
Microsoft Entra ID
Okta
OneLogin
RipplingGet help
Get help with the SCIM bridge, like if you lose your bearer token or session file.
Wenn du eine bestehende Bereitstellungsintegration hast
If you see the details for an existing provisioning integration on the setup page, select Regenerate Credentials, then follow the steps to save the new credentials to your 1Password account and install them on your SCIM bridge. Existing settings for the integration, such as managed groups you selected, will be retained.
If you don’t need to retain existing settings, select More Actions > Deactivate Provisioning. Then select Sign In on the setup page again.
To get more help or share feedback, contact 1Password Business Support or join the discussion with the 1Password Support Community.
Learn more
Was this article helpful?
Glad to hear it! If you have anything you'd like to add, feel free to contact us.
Sorry to hear that. Please contact us if you'd like to provide more details.