# 1Password SCIM bridge

Generated on 6 Oct 2025 from [the 1Password SCIM bridge catalog page](https://marketplace.digitalocean.com/apps/1password-scim-bridge)

With 1Password Business, you can automate many common administrative tasks using the 1Password SCIM bridge. It uses the System for Cross-domain Identity Management (SCIM) protocol to connect 1Password with your existing identity provider, like Azure Active Directory or Okta, so you can:

- create users and groups (including automated account confirmation),
- grant and revoke access to groups,
- and suspend deprovisioned users

With this 1-Click App, you’ll quickly set up and deploy the SCIM bridge on a cluster in your own environment, so the encryption keys for your account are only available to you and no one else. To set up and deploy the SCIM bridge, you’ll need:

- administrative access in 1Password Business
- this 1-Click App with publicly accessible static LoadBalancer IP address
- a DNS record to allow for encrypted (HTTPS) communication to the SCIM bridge

## Software Included

| Package | Version | License |
|---|---|---|
| [1Password SCIM bridge](https://support.1password.com/scim/) | [2.9.13](https://app-updates.agilebits.com/product_history/SCIM#v209131) | [Proprietary](https://support.1password.com/scim/) |
| [Redis](https://hub.docker.com/r/bitnamisecure/redis/tags) | [8.2.1](https://app-catalog.vmware.com/bitnami/releases/45c3e311-138d-4859-abf1-83c0bc53f9b5/overview) | [Redis Open Source](https://redis.io/legal/rsalv2-agreement/) |

## Creating an App using the Control Panel

Click the **Deploy to DigitalOcean** button to install a Kubernetes 1-Click Application. If you aren’t logged in, this link will prompt you to log in with your DigitalOcean account.

[![Deploy to DO](https://www.deploytodo.com/do-btn-blue.svg)](https://cloud.digitalocean.com/kubernetes/clusters/new?addonslug=op-scim-bridge&nodePools=s-1vcpu-2gb%3A3)

## Creating an App using the API

In addition to creating 1Password SCIM bridge using the control panel, you can also use the [DigitalOcean API](https://docs.digitalocean.com/reference/api). As an example, to create a 3 node DigitalOcean Kubernetes cluster made up of Basic Droplets in the SFO2 region, you can use the following `doctl` command. You need to authenticate with `doctl` with your [API access token](https://docs.digitalocean.com/reference/api/create-personal-access-token/index.html.md) and replace the `$CLUSTER_NAME` variable with the chosen name for your cluster in the command below.

```shell
doctl kubernetes clusters create --size s-4vcpu-8gb $CLUSTER_NAME --1-clicks op-scim-bridge
```

## Getting Started After Deploying 1Password SCIM bridge

After deploying the 1Password SCIM bridge, navigate to the IP address of the load balancer created by Kubernetes using your web browser, and follow the on-screen instructions. For more details on how to deploy and utilize your 1Password SCIM bridge app, you can read more at [https://support.1password.com/scim-deploy-digitalocean/](https://support.1password.com/scim-deploy-digitalocean/).

Refer to [https://support.1password.com/scim](https://support.1password.com/scim) if you have any issues, and contact [support+business@1password.com](mailto:support+business@1password.com) if you have any questions.