> ## Documentation Index
> Fetch the complete documentation index at: https://www.1password.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Unlock 1Password CLI with Microsoft

export const Image = ({src, darkSrc, alt, width, border, height, round}) => {
  const classNames = ["mint-mx-4"];
  if (border) {
    classNames.push("mint-rounded-sm");
  }
  if (round) {
    classNames.push("mint-rounded-lg");
  }
  const style = {};
  if (width) style.width = typeof width === "number" ? `${width}px` : width;
  if (height) style.height = typeof height === "number" ? `${height}px` : height;
  return darkSrc ? <>
      <img src={src} alt={alt} className={[...classNames, "dark:hidden"].join(" ")} style={Object.keys(style).length > 0 ? style : undefined} />
      <img src={darkSrc} alt={alt} className={[...classNames, "hidden dark:block"].join(" ")} style={Object.keys(style).length > 0 ? style : undefined} onError={e => {
    e.target.src = src;
  }} />
    </> : <img src={src} alt={alt} className={classNames.join(" ")} style={Object.keys(style).length > 0 ? style : undefined} />;
};

<head>
  <meta name="robots" content="noindex,nofollow" />
</head>

<Note>
  This feature is only available as part of the [Unlock with Microsoft beta](https://support.1password.com/cs/sso-azure/).
</Note>

If your 1Password administrator has [configured Unlock with SSO](https://support.1password.com/cs/sso-configure-azure/), you can sign in to 1Password CLI with Microsoft.

During the beta period, Unlock with SSO will be available only for Microsoft using the OpenID Connect (OIDC) protocol. Additional platforms, identity providers, and protocols will be available in the future.

If the 1Password account you sign in to with Microsoft doesn't allow biometric unlock, you'll be prompted to allow 1Password CLI access to the 1Password app when you sign in.

## Requirements

Before you start, you'll need to:

1. [Join your team](https://support.1password.com/cs/sso-get-started-azure/#join-your-team), or [switch to unlock with Microsoft](https://support.1password.com/cs/sso-get-started-azure/#switch-to-unlock-with-microsoft).
2. Install the nightly release of 1Password for [Mac](https://support.1password.com/betas/?mac), [Windows](https://support.1password.com/betas/?windows), or [Linux](https://support.1password.com/betas/?linux).
3. Sign in to 1Password for [Mac](https://support.1password.com/cs/sso-sign-in-azure/#in-the-apps/), [Windows](https://support.1password.com/cs/sso-sign-in-azure/#in-the-apps/), or [Linux](https://support.1password.com/cs/sso-sign-in-azure/#in-the-apps/) using Microsoft.
4. Install [the latest 1Password CLI beta build](https://app-updates.agilebits.com/product_history/CLI2#beta).

## Step 1: Connect 1Password CLI with the 1Password app

To turn on the app integration and set up 1Password CLI to authenticate with Microsoft:

<Tabs groupId="operating-systems">
  <Tab title="Mac">
    <CardGroup cols={2}>
      <div>
        1. Open and unlock the [1Password app](https://1password.com/downloads/).
        2. Select your account or collection at the top of the sidebar.
        3. Navigate to **Settings** > **[Developer](onepassword://settings/developers)**.
        4. Select **Integrate with 1Password CLI**.
        5. If you want to authenticate 1Password CLI with your fingerprint, turn on **[Touch ID](https://support.1password.com/touch-id-mac/)** in the app.
      </div>

      <div>
        <Frame>
          <Image border round alt="The 1Password Developer settings pane with the Integrate with 1Password CLI option selected." src="/static/img/cli/developer-settings-light.png" darksrc="/static/img/cli/developer-settings-dark.png" />
        </Frame>
      </div>
    </CardGroup>
  </Tab>

  <Tab title="Windows">
    <CardGroup cols={2}>
      <div>
        1. Open and unlock the [1Password app](https://1password.com/downloads/).
        2. Select your account or collection at the top of the sidebar.
        3. Turn on **[Windows Hello](https://support.1password.com/windows-hello/)** in the app.
        4. Navigate to **Settings** > **[Developer](onepassword://settings/developers)**.
        5. Select **Integrate with 1Password CLI**.
      </div>

      <div>
        <Frame>
          <Image border alt="The 1Password Developer settings pane with the Integrate with 1Password CLI option selected." src="/static/img/cli/developer-settings-windows-light.png" darksrc="/static/img/cli/developer-settings-windows-dark.png" />
        </Frame>
      </div>
    </CardGroup>
  </Tab>

  <Tab title="Linux">
    <CardGroup cols={2}>
      <div>
        1. Open and unlock the [1Password app](https://1password.com/downloads/).
        2. Select your account or collection at the top of the sidebar.
        3. Navigate to **Settings** > **[Security](onepassword://settings/security)**.
        4. Turn on **[Unlock using system authentication](https://support.1password.com/system-authentication-linux/)**.
        5. Navigate to **Settings** > **[Developer](onepassword://settings/developers)**.
        6. Select **Integrate with 1Password CLI**.
      </div>

      <div>
        <Frame>
          <Image border round alt="The 1Password Developer settings pane with the Integrate with 1Password CLI option selected." src="/static/img/cli/developer-settings-linux.png" darksrc="/static/img/cli/developer-settings-linux-dark.png" />
        </Frame>
      </div>
    </CardGroup>
  </Tab>
</Tabs>

## Step 2: Sign in with Microsoft

Once the 1Password app integration is turned on, open the terminal and type [`op signin`](/cli/get-started/#step-3-enter-any-command-to-sign-in). Use the arrow keys to select your Microsoft-enabled account from the list of all accounts added to your 1Password app. 1Password CLI will prompt you to authenticate.

```shell theme={null}
op signin
```

```shell highlight={2} theme={null}
Select account  [Use arrows to move, type to filter]
> ACME Corp (acme.1password.com)
  AgileBits (agilebits.1password.com)
  Add another account
```

After you sign in for the first time, 1Password CLI will automatically sign in to your most recently used account.

If you want to [sign in to a different account](/cli/use-multiple-accounts/), you can use the `--account` flag or an environment variable.

## Get help

If the 1Password account you sign in to with Microsoft doesn't allow biometric unlock, you'll be prompted to allow 1Password CLI access to the 1Password app when you sign in.

## Learn more

* [About Unlock with Microsoft](https://support.1password.com/cs/sso-azure/)
* [Configure Unlock 1Password with Microsoft](https://support.1password.com/cs/sso-configure-azure/)
* [Get started with Unlock 1Password with Microsoft](https://support.1password.com/sso-get-started/)
* [Sign in to 1Password with Microsoft](https://support.1password.com/cs/sso-sign-in-azure/)
* [Link new apps and browsers to unlock with Microsoft](https://support.1password.com/sso-linked-apps-browsers/)
* [If you're having trouble unlocking 1Password with SSO](https://support.1password.com/sso-troubleshooting/)
