{"id":4506,"date":"2022-12-21T10:20:36","date_gmt":"2022-12-21T18:20:36","guid":{"rendered":"https:\/\/SUMMALAI.COM\/?p=4506"},"modified":"2022-12-21T10:20:38","modified_gmt":"2022-12-21T18:20:38","slug":"how-to-deploy-1password-scim-bridge-on-the-google-cloud-platform","status":"publish","type":"post","link":"https:\/\/SUMMALAI.COM\/?p=4506","title":{"rendered":"How to Deploy 1Password SCIM Bridge on the Google Cloud Platform"},"content":{"rendered":"\n<p>Learn how to deploy 1Password SCIM Bridge on Google Cloud Platform, so you can integrate with your identity provider.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">TIP<\/h4>\n\n\n\n<p>If you don\u2019t use Google Cloud Platform, you can still&nbsp;<a href=\"https:\/\/support.1password.com\/scim\/\">automate provisioning in another deployment environment<\/a>.<\/p>\n\n\n\n<p>With&nbsp;<a href=\"https:\/\/1password.com\/business\/\">1Password Business<\/a>, you can automate many common administrative tasks using 1Password SCIM Bridge. It uses the System for Cross-domain Identity Management (SCIM) protocol to connect 1Password with your existing identity provider, like Azure Active Directory, JumpCloud, Okta, OneLogin, or Rippling.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/i.1password.com\/media\/scim\/provisioning.svg\" alt=\"\"\/><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#step-1-deploy-1password-scim-bridge-on-google-cloud-platform\">Deploy 1Password SCIM Bridge<\/a><\/li><li><a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#step-2-connect-the-scim-bridge-to-your-1password-account\">Connect to your account<\/a><\/li><li><a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#step-3-connect-your-identity-provider-to-1password-scim-bridge\">Connect your identity provider<\/a><\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step-1-deploy-1password-scim-bridge-on-google-cloud-platform\">Step 1: Deploy 1Password SCIM Bridge on Google Cloud Platform<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#step-1-deploy-1password-scim-bridge-on-google-cloud-platform\"><\/a><\/h2>\n\n\n\n<p>If you don\u2019t already have a&nbsp;<a href=\"https:\/\/cloud.google.com\/\">Google Cloud Platform&nbsp;<\/a>&nbsp;account, create one. Then follow these steps.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"11-create-a-project\">1.1: Create a project<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#11-create-a-project\"><\/a><\/h3>\n\n\n\n<p>The SCIM bridge must be deployed within a project. To create a project:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Visit the&nbsp;<a href=\"https:\/\/console.cloud.google.com\/cloud-resource-manager\">Manage resources&nbsp;<\/a>&nbsp;page and click Create Project.<\/li><li>Enter a Project Name. If you\u2019re part of an organization, choose it.If you can\u2019t choose your organization, contact your Google Cloud Platform organization administrator.<\/li><li>Click Create.<\/li><\/ol>\n\n\n\n<p>After the project has been created, you can configure the SCIM bridge.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"12-configure-1password-scim-bridge\">1.2: Configure 1Password SCIM Bridge<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#12-configure-1password-scim-bridge\"><\/a><\/h3>\n\n\n\n<p>Visit&nbsp;<a href=\"https:\/\/console.cloud.google.com\/marketplace\/details\/agilebits-public\/op-scim-bridge\">1Password SCIM Bridge on Google Cloud Platform Marketplace&nbsp;<\/a>&nbsp;and click Configure. If prompted, choose the project you created above.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><\/h4>\n\n\n\n<p>If you see \u201c\u2018Kubernetes Engine Admin\u2019 role is required\u201d, ignore it. The message will go away after you create a cluster.<\/p>\n\n\n\n<p>Configure the SCIM bridge and click Deploy:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Cluster<\/strong><br>Choose one or click \u201cCreate a new cluster\u201d. If you create a new cluster, refresh the page after it has been created.<\/li><li><strong>Namespace<\/strong><br>Use the provided default. Or if you have an existing application in the cluster, create a new namespace called \u201c1password\u201d.<\/li><li><strong>App instance name<\/strong><br>Use the provided default.<\/li><li><strong>1Password sign-in address<\/strong><br>Your&nbsp;<a href=\"https:\/\/support.1password.com\/sign-in-troubleshooting\/#if-youre-asked-for-a-sign-in-address\">1Password sign-in address<\/a>. For example:&nbsp;<code>example.1password.com<\/code><\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/i.1password.com\/media\/gcp-deployment.png\" alt=\"the configuration page for 1Password SCIM Bridge\"\/><\/figure>\n\n\n\n<p>After the SCIM bridge is deployed, you\u2019ll see its application details.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"13-set-up-1password-scim-bridge\">1.3: Set up 1Password SCIM Bridge<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#13-set-up-1password-scim-bridge\"><\/a><\/h3>\n\n\n\n<p>In the \u201cSCIM bridge info\u201d section of the application details, the \u201c1Password SCIM Bridge public IP\u201d begins with&nbsp;<code>10<\/code>&nbsp;(for example,&nbsp;<code>10.11.255.255<\/code>), which is a private IP address.<\/p>\n\n\n\n<p>Refresh the page until the IP address changes to a public IP, one that doesn\u2019t begin with&nbsp;<code>10<\/code>.<\/p>\n\n\n\n<p>Before you can connect the SCIM bridge to your 1Password account, you\u2019ll also need to:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Configure a DNS A record for your chosen domain and point it to the IP address of your load balancer. For example:&nbsp;<code>scim.example.com<\/code>.<\/li><li>Wait for the DNS to propagate.<\/li><\/ul>\n\n\n\n<p>Then navigate to your SCIM bridge domain.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/i.1password.com\/media\/scim-bridge-public-ip.png\" alt=\"the application details page with the 1Password SCIM Bridge public IP highlighted\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step-2-connect-the-scim-bridge-to-your-1password-account\">Step 2: Connect the SCIM bridge to your 1Password account<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#step-2-connect-the-scim-bridge-to-your-1password-account\"><\/a><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"21-sign-in-to-your-1password-account\">2.1: Sign in to your 1Password account<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#21-sign-in-to-your-1password-account\"><\/a><\/h3>\n\n\n\n<p>On the 1Password SCIM Bridge setup page:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Enter the domain name you configured for the SCIM bridge to verify it.<\/li><li>Click Sign In and follow the onscreen instructions.<\/li><\/ol>\n\n\n\n<p>If you see the details for an existing provisioning integration, you\u2019ll need to deactivate it first. Click More Actions and choose Deactivate Provisioning. Then click Sign In on the SCIM Bridge Setup page again.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/i.1password.com\/media\/scim-bridge-status-new.png\" alt=\"1Password SCIM Bridge Status\"\/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"22-authenticate-with-the-scim-bridge\">2.2: Authenticate with the SCIM bridge<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#22-authenticate-with-the-scim-bridge\"><\/a><\/h3>\n\n\n\n<p>After you complete the setup process, you\u2019ll get a&nbsp;<code>scimsession<\/code>&nbsp;file and bearer token. Save them both in 1Password in case you need them again.<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Click \u201cInstall on &lt;yourdomain&gt;\u201d. You\u2019ll see the 1Password SCIM Bridge Status page.<\/li><li>Enter your OAuth bearer token and click Verify.<\/li><\/ol>\n\n\n\n<h4 class=\"wp-block-heading\">IMPORTANT<\/h4>\n\n\n\n<p>The bearer token and&nbsp;<code>scimsession<\/code>&nbsp;file you receive during setup can be used together to access information from your 1Password account. You\u2019ll need to share the bearer token with your identity provider, but it\u2019s important to&nbsp;<strong>never share it with anyone else<\/strong>. And never share your&nbsp;<code>scimsession<\/code>&nbsp;file with&nbsp;<strong>anyone at all<\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"23-configure-a-static-ip-address\">2.3: Configure a static IP address<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#23-configure-a-static-ip-address\"><\/a><\/h3>\n\n\n\n<p>When you first deploy 1Password SCIM Bridge, an ephemeral IP address is assigned to it. This address is not guaranteed to remain constant, which may interrupt your automated provisioning.<\/p>\n\n\n\n<p>To use the SCIM bridge without interruption, promote the \u201c1Password SCIM Bridge public IP\u201d to a static IP address. Learn how to&nbsp;<a href=\"https:\/\/cloud.google.com\/compute\/docs\/ip-addresses\/reserve-static-external-ip-address#promote_ephemeral_ip\">configure a static IP address. &nbsp;&nbsp;<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step-3-connect-your-identity-provider-to-1password-scim-bridge\">Step 3: Connect your identity provider to 1Password SCIM Bridge<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#step-3-connect-your-identity-provider-to-1password-scim-bridge\"><\/a><\/h2>\n\n\n\n<h4 class=\"wp-block-heading\">IMPORTANT<\/h4>\n\n\n\n<p><strong>If you\u2019ve already been using 1Password Business<\/strong>, make sure the email addresses and group names in your 1Password account are identical to those in your identity provider.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>If anyone is using a different email address in 1Password, ask them to change it.<\/li><li>If you have existing groups in 1Password that you want to sync with groups in your identity provider, adjust the group names in 1Password.<\/li><\/ul>\n\n\n\n<p>Because 1Password SCIM Bridge provides a SCIM 2.0-compatible web service that accepts OAuth bearer tokens for authorization, you can use it with a variety of identity providers.<\/p>\n\n\n\n<p>Connect to the TLS-secured API gateway, proxy, or load balancer where you\u2019ve configured the SCIM bridge (for example:&nbsp;<code>https:\/\/scim.example.com<\/code>) and authenticate using your OAuth bearer token.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">USER GUIDE<\/h4>\n\n\n\n<p>Learn how to connect your identity provider:<\/p>\n\n\n\n<p><a href=\"https:\/\/support.1password.com\/scim-azure-ad\/\">&nbsp;Azure Active Directory<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/support.1password.com\/scim-google-workspace\/\">&nbsp;Google Workspace<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/support.1password.com\/scim-jumpcloud\/\">&nbsp;JumpCloud<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/support.1password.com\/scim-okta\/\">&nbsp;Okta<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/support.1password.com\/scim-onelogin\/\">&nbsp;OneLogin<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/support.1password.com\/scim-rippling\/\">&nbsp;Rippling<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"get-help\">Get help<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#get-help\"><\/a><\/h2>\n\n\n\n<p><a href=\"https:\/\/support.1password.com\/scim-troubleshooting\/\">Get help with the SCIM bridge<\/a>, like if you lose your bearer token or session file.<\/p>\n\n\n\n<p>To get more help or share feedback,&nbsp;<a href=\"https:\/\/1password.zendesk.com\/hc\/en-us\/requests\/new\">contact 1Password Business Support&nbsp;<\/a>&nbsp;or join the discussion with the&nbsp;<a href=\"https:\/\/1password.community\/categories\/scim-bridge\">1Password Support Community<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"learn-more\">Learn more<a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/#learn-more\"><\/a><\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/support.1password.com\/scim-update\/\">Update 1Password SCIM Bridge<\/a><\/li><\/ul>\n\n\n\n<p>Ref: <a href=\"https:\/\/support.1password.com\/scim-deploy-gcp\/\">Deploy 1Password SCIM Bridge on Google Cloud Platform<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn how to deploy 1Password SCIM Bridge on Google Cloud Platform, so you can integrate with your identity provider. TIP If you don\u2019t use Google Cloud Platform, you can still&nbsp;automate provisioning in another deployment environment. With&nbsp;1Password Business, you can automate many common administrative tasks using 1Password SCIM Bridge. It uses the System for Cross-domain Identity <a class=\"read-more\" href=\"https:\/\/SUMMALAI.COM\/?p=4506\">Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[238,585,1431,497],"tags":[1432],"class_list":["post-4506","post","type-post","status-publish","format-standard","hentry","category-cloud","category-google-cloud","category-password-management","category-solutions","tag-deploy-1password-scim-bridge-on-the-google-cloud"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4506"}],"version-history":[{"count":1,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4506\/revisions"}],"predecessor-version":[{"id":4507,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4506\/revisions\/4507"}],"wp:attachment":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4506"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}