Forum Discussion

Former Member's avatar
Former Member
3 years ago

1Password CLI in azure function for AAD user and group sync

Hello! The goal was to avoid setting up a scin bridge because of the associated costs of kubernetes. (I found it difficult to get a good idea of how much this was likely to cost in azure. My boss ...
cli
Former Member's avatar
Former Member
3 years ago

Hi @not,

You're right, service accounts can't be used for provisioning. The scim bridge is really ideal for provisioning, our scim-examples repo has a beta deployment option using azure container apps that ends up costing about $16/month, here is the link: https://github.com/1Password/scim-examples/tree/master/beta/azure-container-apps

Alternatively, there are some AKS cost optimizations documented here if you are provisioning less than 500 users: https://gist.github.com/scottisloud/248e705729fd31809ce9f3e075e0e5ce

We haven't really seen anyone else use azure functions, so we unfortunately don't have much information as to what that would look like in practise. If you do decide to try out the scim bridge route and run into any issues, please reach out to our support team, we have some people who are very knowledgeable that will be able to help.

I'm sorry I don't have a simpler answer!
Amanda