Once you have your SSO authentication source working, continue to the next step of creating the 1Password application in Duo. Configure Single Sign-Onīefore configuring 1Password with Duo SSO using OpenID Connect (OIDC) authentication you'll first need to enable Duo Single Sign-On for your Duo account and configure a working authentication source. Duo checks the user, device, and network against an application's policy before allowing access to the application. For example, you can require that Salesforce users complete two-factor authentication at every login, but only once every seven days when accessing 1Password. Duo Single Sign-On acts as an OpenID provider (OP), authenticating your users using existing on-premises Active Directory (AD) or any SAML 2.0 IdP and prompting for two-factor authentication before permitting access to 1Password.ĭuo Single Sign-On is available in Duo Premier, Duo Advantage, and Duo Essentials plans, which also include the ability to define policies that enforce unique controls for each individual SSO application. Please fill out the following form with 1Password to get access to the required settings: Unlock with Duo SSO Beta form.ĭuo Single Sign-On is our cloud-hosted SSO product which layers Duo's strong authentication and flexible policy engine on top of 1Password logins using the Security Assertion Markup Language (SAML) 2.0 or OpenID Connect (OIDC) authentication standards. This application is currently in private preview with 1Password. Add two-factor authentication and flexible security policies to your 1Password logins with Duo Single-Sign On, our cloud-hosted OpenID provider, offering inline self-service enrollment and authentication with Duo Universal Prompt.

1password admin login