Conversion Issue from Keeper to 1Password - Shared Folders Don't get converted to tags

@MrC So in a perfect world, the converter would make a separate vault for each shared folder, that would streamline the process. When creating the export the default is only the folders that user has shared out, not ones that have been shared by them.

@gholcomb

I get it.

There are several reasons why the perfect world isn't here yet.

• Creating a single vault was a design decision I made when I created the 1PUX generator. It is (correctly) painful to remove vaults (yet obviously this is something I frequently). Imagine a generator creating a dozen vaults, and then having to manually delete each one:

  • right click the correct vault
  • select Delete Vault...
  • type in the vault name to the confirmation dialog
  • press OK
  • select the next vault
  • rinse, lather, repeat

• The 1Password 1PUX importer has no user-facing diagnostics, and it is very finicky. It was a lot of reverse engineering to be able to reliably generate importable 1PUX files. When things go wrong, the importer just aborts. So I quit while I was ahead.

• I didn't want to pollute a user's list of vaults (I realize most converter users would have none).

• It is much harder to review, edit, purge imported content in multiple vaults (and that's rather important, as you've discovered; and it's critical for me as I review conversions). Its easy to rifle through a list of items (at least for me).

• I thought it prudent not to muscle-memory train users to delete vaults.

• I don't have access to the more feature-rich business or memberships of other password managers, and without my ability to construct comprehensive export data, I'd be programming blind. The keeper converter is just one examle (you're the first person to provide me with the format of the shared_folders list and inform me about the "shared_folder" attribute in a record).

All that said, the converter framework can create multiple 1PUX (or 1PIF) files; the onepux and onepif converters do this with the ```--percategory option. I suppose for the keeper converter, there could be an similar per-shared-folder option to do likewise, one 1PUX per shared folder, and I suppose one more for any items not in a shared folder. That could end up being a lot of 1PUX!

@MrC I understand completely and what you've provided and tweaked works perfectly for my use case. I'm moving my clients from Keeper over to 1Password, but all my clients are smaller and generally only have a single shared folder. As you were helping me I was talking to a number of other MSPs making the same move from Keeper to 1Password, but they have a few larger installations, with more shared folders.

My opinion is what you've provided works and saves a ton of time vs. importing CSV files and massaging the data ourselves.

So thanks again for the great tool and those tweaks to make it even better.

@gholcomb

If you have a lot of shared_folders and need separation like this, and are willing to test out the work, I can look tomorrow into adding this option. When there is someone like yourself sufficiently motivated and has the technical background, its much easier to me to fly without a net.

@MrC
Let me check with the other MSPs to see if this would be helpful to them before you commit time to this. If its useful I'm happy to help to make it better for everyone.

@MrC
The consensus was this would be useful as an option. Let me know what you need from me.

@gholcomb

1PUX file per shared_folder, each containing one vault ?

Or do you need 1PUX file with multiple vaults, one per shared_folder ?

I believe the first option should be simpler to implement, the second might take some time. I'll investigate based upon your reply.

I would go with which ever one is easier to implement.

@gholcomb

I've implemented the changes, and just pushed a development version (in the folder: mrc-converter-suite - development version).

The new option is --persharedfolder (keeper only currently).

Compare the two runs below. The shared folder name I used for two records in my test data is "Shared 1".

The shared folder name is added to the --outfile vault name (default "M_C_S'). Records not tagged as belonging to a shared folder are added to the non-suffixed output file.

@MrC
Just tried it and worked like a champ. Thank you.