SCIM Azure UPN/Email

Thanks for explaining your usecase.

As you create the Enterprise Application for provisioning in Entra ID, the default mapping for provisioning users is based off the UPN attribute. You may change the 1Password Business Enterprise App, to provision users off the mail attribute instead of UPN, this can be found within the Enterprise Application > Mappings > User Mappings. Select the first line and change the source from UPN to mail.

Caution here in this step is it will also send email address change notification to those who have differentiating UPN and email since the attribute is a global setting within the enterprise app.

As side note(could be unrelated in your instance): for users leveraging Sso we advise this step of configuring optional UPN claims.