Skip to main content

1password

Visualize 1Password audit logs, vaults, and user activities in the JupiterOne graph. Track audit events, item usage, sign-in attempts, and secrets, and map users to their associated actions and vaults. Monitor changes and unusual behavior through custom queries and alerts.

1Password Integration Installation in JupiterOne

Overview​

This guide walks you through how to connect your 1Password Business or Enterprise account with JupiterOne to monitor and manage your security data.

The integration pulls data from 1Password using two components:

  1. Events API – sends security-related activities (like sign-ins, item access, etc.) to JupiterOne.
  2. Connect Server – allows JupiterOne to read vault and item information from your 1Password account securely.

Prerequisites:​

  • A 1Password Business or Enterprise account.
  • Admin access in 1Password (you’ll need this to generate tokens).
  • Access to JupiterOne with permission to configure integrations.

Set Up in 1Password​

You will generate two tokens: one for Events API and one for Connect Server.

Generate Events API Token (for activity logs)​

This token lets JupiterOne collect logs of important security events from 1Password.

Steps:​

  1. Log in to your 1Password account as an admin.

  2. Look at the URL — it shows your account region. Example:

    • If URL is https://my.1password.com, your region is 1password.com.

  3. In the left menu, click Integration.

  4. Go to the Directory tab.

  5. Under Events Reporting, click the monitoring service you want to connect (choose JupiterOne or similar).

  6. Enter a System Name (e.g., “JupiterOne Integration”) and click Add Integration.

  7. On the next screen:

    • Enter a Token Name (e.g., “J1 Events API”).

    • Choose when the token should expire.

    • Enable these event types:

      • Sign-in attempts
      • Item usage events
      • Audit events

  8. Click Issue Token and copy the token — save it securely! You’ll use it in JupiterOne.

  9. Based on your region, find the correct Events API Base URL:

    RegionBase URL
    1password.comhttps://events.1password.com
    ent.1password.comhttps://events.ent.1password.com
    1password.cahttps://events.1password.ca
    1password.euhttps://events.1password.eu

Generate Connect Server Token (for vault data)​

The Connect Server lets JupiterOne access vaults and items you specify.

What is Connect Server?​

A lightweight 1Password service you run yourself (usually in the cloud or internally). It gives access to vaults and items through a secure API.

Steps:​

  1. Go back to the 1Password admin dashboard.

  2. Click Developer from the left menu.

  3. Open the Connect Server tab.

  4. Click New Connect Server.

  5. Enter a name for your environment (e.g., “JupiterOne Env”).

  6. Click Add Vaults – select the vaults this server should have access to.

  7. Click Add Environment.

  8. On the next screen:

    • Enter a Token Name (e.g., “J1 Connect Token”).
    • Set the token’s expiry.
    • Choose vaults that this token should access.

  9. Click Issue Token and copy the token — save it securely.

  10. Follow the official 1Password Connect Server deployment guide to:

    • Deploy the Connect Server (usually on a VM, container, or cloud service).
    • Get the Connect Server Base URL.

Configure Integration in JupiterOne​

Now that you have both tokens and URLs, let’s connect everything in JupiterOne.

Steps:​

  1. In JupiterOne, go to the left navigation menu and click Integrations.

  2. Scroll down and click the 1Password integration tile.

  3. Click Add Configuration and fill in the fields:

    FieldWhat to Enter
    Reporting Event Base URLUse the Base URL from earlier (based on your region)
    Reporting Event Access TokenPaste your Events API token here
    Connect Server Base URLThe URL where your Connect Server is running
    Connect Server Access TokenPaste your Connect Server token here
    Account NameA friendly name (e.g., “1Password - US Region”)
    DescriptionOptional – notes to identify this setup
    Polling IntervalHow often to collect data (or choose DISABLED to run manually)

  4. Click Create Configuration to save it.

That’s it! JupiterOne will now start pulling data from 1Password based on the schedule you set.

  • 1Password Connect Server Setup Guide: Link

Next steps​

Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.