Onboard your team

You're ready to deploy 1Password Enterprise Password Manager. By this point, you have:

• Set up your organization's 1Password Enterprise Password Manager account through the sign-up page for your region
• Created a recovery plan
• Mapped your organization's structure
• Decided whether to use automated provisioning, Unlock with SSO, or both
• Decided whether to deploy the 1Password apps automatically or have team members install them
• Told your team about the deployment

Create vaults

Every organization’s 1Password Enterprise Password Manager account starts with two types of vaults: one Shared vault and an Employee vault for each team member. By default, everyone on your team can view, add, and edit items in the Shared vault, so make sure team members know to save private items in their Employee vault instead.

Before you invite anyone, create a shared vault for your first onboarding group, so the vault is ready when team members sign in for the first time.

To create a vault:

1. Sign in to your account on 1Password.com.
2. Select Vaults > New vault.
3. Select Custom.
4. Enter a name for the vault. Name it after the team you're onboarding: for example, Finance vault for a Finance team.
5. Select Create Vault.

Provision groups

If you use automated provisioning, onboard your first group through your identity provider (IdP), such as Microsoft Entra ID or Okta.

If you don't use automated provisioning, invite team members from 1Password.com:

1. Sign in to your account on 1Password.com.
2. Select Invitations.
3. In the Send Invites tab, select Invite by Email.
4. Enter the team member's email address. To invite several people at once, separate their addresses with commas.
5. Under User type, select Team Member.
6. Select Invite.

Manage groups and permissions

Update the permissions for the group you onboarded, if needed. You can:

• Change a team member's role in the group
• Choose which vaults the group can access
• Choose what group members can do with items in a vault, such as view, create, edit, and delete them

Repeat the process with your next group

Help your first group accept their invitations and set up their accounts. After everyone in the group has signed in, repeat these steps with the next group until everyone in your organization is using 1Password.