Skip to main content
This feature is only available as part of 1Password Unlock with SSO.
If your 1Password administrator has set up 1Password Unlock with SSO, you can sign in to 1Password CLI with your identity provider. If the 1Password account you sign in to with SSO doesn’t allow biometric unlock, you’ll be prompted to allow 1Password CLI access to the 1Password app when you sign in.

​
Requirements

Before you start, you’ll need to:
  1. Join your team, or switch to unlock with SSO.
  2. Install the latest version of 1Password for Mac, Windows, or Linux.
  3. Sign in to 1Password for Mac, Windows, or Linux using SSO.
  4. Install the latest Password CLI build.

​
Step 1: Connect 1Password CLI with the 1Password app

To turn on the app integration and set up 1Password CLI to authenticate with your identity provider:
  1. Open and unlock the 1Password app.
  2. Select your account or collection at the top of the sidebar.
  3. Navigate to Settings > Developer.
  4. Select Integrate with 1Password CLI.
  5. If you want to authenticate 1Password CLI with your fingerprint, turn on Touch ID in the app.

​
Step 2: Sign in with SSO

Once the 1Password app integration is turned on, open the terminal and type op signin. Use the arrow keys to select your SSO-enabled account from the list of all accounts added to your 1Password app. 1Password CLI will prompt you to authenticate. 
op signin

Select account  [Use arrows to move, type to filter]
> ACME Corp (acme.1password.com)
  AgileBits (agilebits.1password.com)
  Add another account
After you sign in for the first time, 1Password CLI will automatically sign in to your most recently used account. If you want to sign in to a different account, you can use the --account flag or an environment variable.

​
Get help

If the 1Password account you sign in to with SSO doesn’t allow biometric unlock, you’ll be prompted to allow 1Password CLI access to the 1Password app when you sign in.

​
Learn more