1Password

Sync users and groups from 1Password via SCIM Bridge. Requires a self-hosted or 1Password-hosted SCIM Bridge deployment.

Source connector

Source connector — pulls identity and access data from 1Password into ComplianceScout where it is scored against your compliance frameworks and violation rules.

What ComplianceScout collects

After a successful sync, the following data is available in your ComplianceScout dashboard for violation detection and reporting.

All 1Password users with email, name, and status (active, suspended, guest)
Group memberships and group names
Vault access grants per user and per group
Admin and recovery role assignments

Required credentials

These fields are collected when you add the connector in the ComplianceScout dashboard. Secrets are encrypted at rest using AES-256-GCM and are never logged.

Field	Type	Required	Notes
SCIM Bridge URL	URL	Required	The base URL of your 1Password SCIM Bridge, e.g. https://scim.acme.com
SCIM Bridge bearer token	Secret	Required	The bearer token generated during SCIM Bridge setup. Available in your 1Password Secrets Automation vault.

How to set up this connector

Follow these steps to gather the credentials above and connect 1Password to ComplianceScout.

Deploy 1Password SCIM Bridge following the official documentation for your platform (Docker, AWS, GCP, etc.).
During setup, a bearer token is generated and stored in your 1Password Secrets Automation vault under "SCIM Bridge".
Note the public URL of your SCIM Bridge deployment.
In ComplianceScout, go to Data & Secrets → Integrations → Add Connector → 1Password, enter the SCIM Bridge URL and bearer token, then click Test and Save.

Ready to connect 1Password?

Start a free trial — your tenant is provisioned instantly and you can wire up this integration from the connectors page.

Start a free trial Add connector →