SaaS License & Feature Checker 1Password
1Password: SSO, SCIM & audit log plans
1Password Business includes enterprise SSO ("Unlock with SSO", OIDC — not SAML), SCIM provisioning, and an administrative audit log.
| Control | Availability | Minimum route |
|---|---|---|
| Enterprise SSO | Included | Business · OIDC |
| SCIM / automated provisioning | Included | Business |
| Administrative audit logs | Included | Business |
Product scope
1Password Business password manager. Plan ladder: Teams Starter Pack, Business, Enterprise.
Market scope
Global English documentation (1password.com, support.1password.com).
Identity scope note
1Password enterprise SSO is "Unlock with SSO" — OIDC only, not SAML — and is authentication-only; provisioning is a separate feature.
Admin controls
The three controls in detail
Availability, protocol where relevant, the minimum plan or add-on, the purchase path, one caveat, and the official sources.
Enterprise SSO
- Min. route
- Business
"Unlock with SSO" is OIDC only (Authorization Code + PKCE), not SAML, and is authentication-only. Available on 1Password Business with IdPs including Entra ID, Okta, Google, OneLogin, Duo, JumpCloud, Ping, and Auth0.
Official sources
- 1Password business pricing — 1Password · checked 27 August 2026
- Unlock 1Password with SSO — 1Password · checked 27 August 2026
SCIM / automated provisioning
- Min. route
- Business
Automated provisioning uses the self-hosted 1Password SCIM Bridge on 1Password Business (IdPs: Entra, Okta, Google, OneLogin, JumpCloud, Rippling); a newer hosted "Automated provisioning" option exists for Entra and Okta.
Official sources
- 1Password business pricing — 1Password · checked 27 August 2026
- Automate provisioning with the 1Password SCIM Bridge — 1Password · checked 27 August 2026
Administrative audit logs
- Min. route
- Business
"The audit log is only available in 1Password Business." Owners/administrators see sign-in attempts, device authorizations, provisioning, MFA changes, vault access, and group management; 365-day retention with CSV export. Distinct from Insights, which is security-posture reporting.
Official sources
- 1Password business pricing — 1Password · checked 27 August 2026
- View the 1Password activity log — 1Password · checked 27 August 2026
Plans and add-ons referenced
Plan names are shown exactly as 1Password documents them. No prices.
- Teams Starter PackPaid
- BusinessPaid
- EnterpriseEnterprise
Evidence boundary
CertPilot summarizes first-party vendor documentation for three admin controls — enterprise SSO, SCIM, and administrative audit logs. Plans and packaging change; confirm the current entitlement with the vendor before purchasing or changing a subscription. This is not pricing data, a recommendation, a security score, or a tenant inspection.
Methodology: each control is written from the official first-party sources listed above and human-verified on the checked date. Availability is normalized to included / enterprise-only / paid add-on; the purchase path is recorded separately. A control with no clear first-party answer is marked unclear, never guessed. Profiles are re-checked on a 90-day cadence and unpublished after 120 days without re-verification.