Skip to main content
With 1Password Credential Broker, administrators can set up a supported integration in their 1Password Business account to allow team members to use secrets from their 1Password Environments in machine workflows. First, an administrator sets up an integration, which defines a trust policy to control how and where the integration can be used. Team members can then connect Environments to their workflows using the configured integrations. When a team member runs a workflow, 1Password validates the identity of the workload using an OIDC token. . Secrets are only accessible after a workload has been verified, and only remain accessible for the duration of the workflow. Every request for access is recorded in your audit log.

​
Add an integration

Before team members can connect their Environments to machine workflows, an administrator must set up an integration in 1Password Business. To set up an integration:
  1. As an administrator, sign in on 1Password.com, then select Developer in the sidebar.
  2. Select the Agents & workflows tab, then select Set up integrations.
    If you’ve already set up an integration and want to add another, select Manage integrations > Add Integration.
  3. Choose one of the available integrations, then follow the steps for your integration below.
Before you connect your 1Password Business account to your GitHub organization, review the following requirements:If your GitHub organization meets the requirements, follow these steps:
  1. Enter a name for the integration and the name of the GitHub organization you want to connect, then select Create integration.
  2. The token value is your integration key, which is required to decrypt secrets in your team’s workflows. Save this key in 1Password for future reference, then follow the steps to add a new secret for your GitHub organization. . Set the secret name to OP_INTEGRATION_KEY and the value to your integration key.
After you’ve set up an integration, your team can start connecting their 1Password Environments to their workflows:

​
Delete an integration

If you want to delete an integration so your team members can no longer use it to broker access to their secrets, follow these steps:
  1. As an administrator, sign in on 1Password.com, then select Developer in the sidebar.
  2. Select the Agents & workflows tab, then select Manage integrations.
  3. Select View All Integrations under the type of integration you want to delete.
  4. Select the vertical ellipsis for the integration you want to delete, then select Delete integration.
After you delete an integration, any of your team member’s workflows associated with the integration will no longer run successfully.

​
Learn more

Related topics

Provide access to secrets at runtime in GitHub Actions (public preview)Get started with the 1Password Users API for Partners (Public Preview)Get data and analytics for your 1Password account