[5] Allow options for non-interactive authentication process and scoped credentials

Forum|Forum|4 years ago
January 17, 2022
3 replies
31 views

Thanks for letting me participate in the CLIv2 Beta!

I would like to be able to use 1password in virtual machines or docker containers without having to login interactively. An authentication option where one can obtain credentials without requiring a user prompt would be really useful for automation/build processes. Few options might be having a dedicated page on the website to manage to authentication tokens (similar to GitHub CLI) or having a IAM user or service account that can be created for specific use cases (similar to AWS/GCP etc).

Also, it would be great to have credentials scoped narrowly (eg. a specific item, a particular set of items, a vault etc). This would provide more confidence in using the 1password CLI as we can do so without having to worry about the environment having access to credentials that are not needed (for example, disallowing access to production credentials in a development environment, etc).

1Password Version: 2.0.0-beta.8
Extension Version: Not Provided
OS Version: macOS 12.0.1 arm64

CLI

1

1P_Simon

1Password Employee

Hi @smanojkarthick ,

We're exploring adding service accounts to 1Password. Thank you for letting us know this will be useful for you.

If/when we're closer to having a design for this or even something to test in Early Access, would you be interested in giving it a look? We'd love to hear your thoughts! It's currently still very early stages though, so I cannot make any promises if it will make its way in or when.

A

Anonymous

Thanks @1P_Simon, definitely - would love to check it out if/when you have it available!

Sadia_A1P

1Password Employee

Hi @smanojkarthick ,

I'm Sadia, a Product Manager at 1Password, and have some news that may be interesting to you. I am looking for some developers and administrators that would be interested in chatting with me about a new feature our team has been working on: Service Accounts. Earlier this year, we introduced the CLI 2.0, where users can use “run” and “inject” commands to substitute secret references for secrets stored in 1Password vaults. With our new Service Account capabilities, organizations can use a separate non-user account to control and manage access to secrets without deploying additional services like Connect.

We are currently building out service accounts and want to understand your pain-points and experiences with secrets management, and gather some feedback, so we could deliver the best product for our customers.

If you are interested, please feel free to reach out to me at sadia.azmal@agilebits.com or sign-up for a 30 minute slot on Calendly. I look forward to hearing from you :)

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO

Scanning file for viruses.

This file cannot be downloaded