You can deploy 1Password SCIM Bridge on any supported infrastructure that allows ingress from your identity provider and egress to 1Password servers. This repository includes examples for deploying 1Password SCIM Bridge on selected platforms, information to help you plan your deployment, and links to related external repositories and support articles.
Read this documentation to help you plan your deployment:
- Learn more about automating provisioning in 1Password using SCIM.
- Review the Preparation Guide, which discusses some of the technical components of SCIM bridge deployment and how to avoid potential issues you might encounter along the way.
Solutions for common cloud service platforms:
- Azure Container Apps using ARM (Azure Resource Manager) template
- Azure Container Apps using Cloud Shell
- Azure Kubernetes Service using Cloud Shell
- App Platform using DigitalOcean portal
- App Platform using DigitalOcean CLI & 1Password CLI
- DigitalOcean Kubernetes using DigitalOcean Marketplace
For physical server or virtual machine on-premise or custom cloud deployments:
The choice of deployment method depends on your available or preferred cloud service provider or infrastructure, as well as the platform and tooling that you use or prefer.
Note
All deployment examples pull the same public 1password/scim container image from Docker Hub.
Here are some additional details to help you make an informed choice:
Many cloud service providers offer Containers as a Service (or Platform as a Service) deployment platforms. Compared to other platforms, these solutions offer:
- DNS and TLS certificate management out-of-the-box
- speedier deployment
- lower expected cost and burden of maintenance
These examples are suitable for use in a production environment, include common configuration options, and can be used as a base for your own custom deployment.
We include examples for Azure Container Apps, Google Cloud Run, and DigitalOcean App Platform.
For a guided deployment of 1Password SCIM Bridge that connects to your 1Password account to automatically generate and load credentials from 1Password, choose a marketplace app. These are off-the-shelf deployments that may be a suitable choice, but:
- are not customizable
- require creating a public DNS record
- have strict networking requirements
We publish these apps to DigitalOcean Marketplace and Google Cloud Marketplace.
Our beta deployment examples represent early efforts to provide a working solution using some new platform or tooling. Each uses the same container image as our stable deployment examples. These deployments should work, but aren't guaranteed and may change in the future.
Learn more about this designation in /beta/README.md.
We sometimes deprecate deployment examples that become irrelevant, usually when a new deployment example is released that is a more desirable solution for that cloud service provider or platform.
At the time of deprecation, these deployment examples were fully functional, but will soon become unsupported and removed from the repository:
Deprecated deployment examples are moved to the /deprecated directory. You can learn more about this designation and find suggested alternatives in /deprecated/README.md.
If you encounter issues with your SCIM bridge deployment or have general questions about automated provisioning, contact 1Password Support. If you need additional deployment examples or some information in these guides needs improvement, file an issue or open a pull request in this repo to let us know.
