Skip to content

Document 1Password SSO/identity flow limitation #439

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
masnwilliams merged 2 commits into from
Jul 8, 2026
Merged

Document 1Password SSO/identity flow limitation #439

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
63221ff
Document that 1Password integration does not support SSO flows
masnwilliams Jul 8, 2026
222a52c
Clarify 1Password limitation is linked-item references, not SSO broadly
masnwilliams Jul 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions integrations/1password.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -139,6 +139,14 @@ If multiple items match a domain, the first match is used. Organize your vaults

If your 1Password item has a one-time password (TOTP) field configured, it will be used automatically for 2FA—no additional setup needed.

## Supported Login Types

Managed Auth fills **direct logins** from 1Password items: username/password credentials plus any TOTP field for 2FA. This includes signing directly into an identity provider itself—for example logging into a Google or Gmail account with its stored username, password, and TOTP.

<Warning>
1Password's linked-item "sign in with" references are not supported. When an item delegates authentication to a separate item—for example a PostHog item set to **sign in with Google**—that link is not exposed through the 1Password API, so Managed Auth can't follow it to the underlying credential. Store a direct login (username/password, plus a TOTP field if needed) for the target site instead.
</Warning>

## Credential Options

The `credential` object supports multiple sources:
Expand Down
Loading