Integration Guide: 1Password

Published Date: June 26, 2026 | Last Updated: June 26, 2026

Overview

The 1Password Business integration connects Tello IAM to your 1Password account using SCIM provisioning via the 1Password SCIM Bridge. Unlike other integrations, 1Password requires a self-hosted SCIM Bridge to be deployed before the connection can be established in Tello IAM. The connection requires a SCIM Bridge Domain and a SCIM Bearer Token, both generated during the SCIM Bridge deployment process.

Before connecting

The Administrator completing this setup must have Admin access to the 1Password Business account. The 1Password SCIM Bridge must be deployed and running before configuring the integration in Tello IAM. Refer to the 1Password SCIM Bridge deployment guide for full deployment instructions.

Step 1: Deploy the 1Password SCIM Bridge

The SCIM Bridge Domain and SCIM Bearer Token are generated automatically during the guided SCIM Bridge deployment in 1Password. To complete this step:

1. Sign in to 1Password.com and navigate to the Integrations section of your account.
2. Follow the guided deployment process to deploy the SCIM Bridge. The deployment generates a SCIM Bridge Domain (the domain where the SCIM Bridge is hosted, for example scim.example.com) and a SCIM Bearer Token paired with a scimsession file.
3. Copy the SCIM Bridge Domain and SCIM Bearer Token.

Note: For detailed SCIM Bridge deployment instructions including infrastructure requirements and hosting options, refer to the 1Password SCIM Bridge documentation.

Step 2: Connect 1Password Business in Tello IAM

1. Navigate to Integrations in the left navigation.
2. Select + Add Integration.
3. Search for 1Password Business and select Add.
4. Enter the SCIM Bridge Domain in the SCIM Bridge Domain field (for example, scim.example.com).
5. Enter the SCIM Bearer Token in the SCIM Bearer Token field.
6. Select Test Connection to verify both values are valid. A Connection successful confirmation will appear if accepted.
7. Select Connect. The integration appears on the Integrations page and an initial sync begins automatically.

Verify the connection

After the initial sync completes, confirm the following on the Integrations page:

• The 1Password Business integration displays a status of Active
• A sync timestamp is present and reflects the completed sync
• User records on the Users page display detected 1Password permissions in the Access column

Reauthorizing the connection

If the integration loses authorization, it will display an error on the Integrations page. Verify that the SCIM Bridge is running and reachable, then select the integration row in Tello IAM, select Configure, and re-enter the credentials. If the SCIM Bearer Token has been regenerated, enter the new token.

Related articles

• 1Password SCIM Bridge — deploy and manage the 1Password SCIM Bridge
• Configuring Integrations — manage sync schedules, drift detection, and integration settings
• Understanding Errors — resolve integration errors and authorization failures

Seasoft Security Solutions LLC | Tello IAM