Our community is getting an upgrade on July 2nd! Learn more in the FAQs →
Existing Personal 1Password Accounts Using Corporate Email Addresses
Hello, We are evaluating 1Password Business for a large enterprise deployment and have a question regarding employees who may already be using personal 1Password accounts with their corporate email addresses. For example: An employee independently signs up for a personal 1Password account using their corporate email address (user@company.com) The company later deploys 1Password Business with SSO and SCIM provisioning Our primary concern is understanding what happens to the employee's personal account in this situation. Specifically: Can the employee keep their personal account? Can the employee change the email address on the personal account (for example, from user@company.com to a personal Gmail address) and continue using it independently? What happens when the same corporate email address is invited to a Business account? What happens if SCIM provisioning creates the same user? Does SSO enforcement affect the existing personal account? Are any personal vaults, items, or data automatically transferred into the Business account? Can Business administrators view or access any data from the employee's personal account? We are particularly interested in real-world experiences from organizations that have encountered employees using personal 1Password accounts with company-owned email addresses before a Business deployment. Thank you for your guidance.Delegated Administration and Vault Permissions in Large Organizations
Hello everyone, We are evaluating 1Password Business for a large enterprise deployment and would like to better understand recommended approaches for delegated administration and permission management. Our goal is to allow departments to manage their own credentials and membership without requiring central IT involvement for every change. Example: Finance System Vault Finance Manager Group = Full control Finance Lead Group = Edit permissions Finance Staff Group = Edit permissions Finance Assistant Group = View-only permissions Questions: Is this a recommended design pattern in 1Password Business? Can department managers be delegated authority to manage group membership without granting broader administrative permissions? How do large organizations typically handle role-based access such as: Department Manager Team Lead Staff Assistant If Microsoft Entra ID or Okta is used with SCIM, do most organizations manage these role memberships in the IdP and synchronize them to 1Password? Can permissions be differentiated for individual items within the same Vault? Example: Finance Vault Record A = Finance Assistants can view Record B = Finance Assistants cannot view Is this possible within a single Vault? Example: 6.If item-level permissions are not supported, is creating separate Vaults considered the recommended design pattern? 7.Have you encountered situations where Vault-level permissions were too coarse-grained? If so, how did you structure your Vaults to balance security and manageability? We would appreciate hearing real-world examples and best practices from organizations operating at scale. Thank you.
Error when onboarding new SSO User
1 Password for Enterprise SSO Method Entra Hosted SCIM Managed Group When I add a new user to a group to automatically onboard them now, when the user gets to the email verification step, that user gets "An Unknown Error Occurred" "Contact your account administrator for help.". below that in the response is "Error(SecureChannelCreateSession(Fetch)) \r\n at /builds/dev/cc/confidential-computing/crates/internal/cc-secure-channel-client/src/lib.rs:445" This did not happen with the first user to onboard through this group, but it has happened with all others. After 48 hours I was able to re-invite one of the users and push them through, but I want to know how to avoid this in the future.
Duo SSO Login Issue
I recently setup Duo SSO. I have one user who missed the deadline to sign in before they needed recovery. The issue I'm having is that during that time they had their email change (name change). And I can't move forward with the recovery because their email on 1Password is different from their email in Duo. As far as I can tell they are essentially locked out of their account and I can't figure out a way to change their email in 1Password to make it match. Thanks, -Bryan
1Password account switch depending on Chrome profile.
I cannot log in, becouse a coworkers 1password is being pushed even when logged into the browser, as you can see (we have different Chrome profiles). Please help - and she is getting an error when she wants to log in, and tries to fix this, that somebody else is already logged into this computer, even if I sign out! :(
HELP! Some of our team member cant access the app within the vault.
I need some help. I’m the admin and password manager, and some team members can’t access the platforms in the vault I shared with them. A few users can log in without issues, but others are getting “incorrect password” errors even though the credentials are correct. I can log in fine on my end, so I’m not sure where the issue is. Because they needed urgent access, we had to share the passwords manually, which defeats the purpose of the vault. I’d really appreciate your help resolving this.Research opportunity: Help shape the future of 1Password + gift card for your time
Hey 1Password community 👋 Our team is running 1:1 research interviews with current 1Password Business customers, and we’d love your insights. We’re especially interested in hearing from folks using the 1Password Enterprise Password Manager (with or without 1Password Device Trust or 1Password SaaS Manager), and who are involved in managing access, identity, and device posture at their company. Our goal with this research is to better understand how access is managed in the real world, especially in places where SSO, IdPs, and MDMs may not reach. Your feedback will directly influence how we evolve our products and features going into 2025. Who we’re looking for: Admins, IT, or Security leads at companies with 500–3,000 employees in North America, Europe, or Australia Decision-makers, or those with hands-on experience managing access tools Current users of 1Password Business and/or Extended Access Management What to expect: A 60-minute live interview Flexible scheduling between August 4th and 15th A $100 gift card from popular retailers as a thank-you We only have 10 slots available, so if you’re interested, please fill out this short screener survey. Thanks for being part of the community, we’re excited to learn from you!
Managed device, with work profile (Android/Zfold7)
I have just left my Samsung s10 for a Z Fold 7. On both phones I have 1Password installed under the Work Profile, they have the same configuration policies. On my ZFold I have to enter my password everything I open the app, biometrics are not working even though it is enabled on the phone. I can not enable Autofill, even though 1P is set to autofill in the phone setting. But on the work profile nothing happens. Please helpMultiple Business Accounts Logged in (one) 1Password.app
We have a small support team, including a primary admin who needs 100% access to the supported 1Password business accounts. Many devices (iPhones, Macs, iPads, Androids) are work/personal blended with applied business/personal separation. In our case, our team uses 1Password for Business for support, but also logs into personal accounts with the same 1Password app on the same devices. When navigating Business support, the autofill/access displays user/passwords for ALL Business accounts logged into 1Password.app. Is there a streamlined way to dedicate specific access when on the Business side versus the personal side? When logging into Netflix (personally), I don't want to have to scroll through a list of client logins to find mine. We have tried using "Collections" with limited success, if any.
