Unlock 1Password CLI with SSO
This feature is only available as part of 1Password Unlock with SSO.
If your 1Password administrator has set up 1Password Unlock with SSO, you can sign in to 1Password CLI with your identity provider.
If the 1Password account you sign in to with SSO doesn't allow biometric unlock, you'll be prompted to allow 1Password CLI access to the 1Password app when you sign in.
Requirements
Before you start, you'll need to:
- Join your team, or switch to unlock with SSO.
- Install the latest version of 1Password for Mac, Windows, or Linux.
- Sign in to 1Password for Mac, Windows, or Linux using SSO.
- Install the latest Password CLI build.
Step 1: Connect 1Password CLI with the 1Password app
To turn on the app integration and set up 1Password CLI to authenticate with your identity provider:
- Mac
- Windows
- Linux
- Open and unlock the 1Password app.
- Select your account or collection at the top of the sidebar.
- Navigate to Settings > Developer.
- Select Integrate with 1Password CLI.
- If you want to authenticate 1Password CLI with your fingerprint, turn on Touch ID in the app.


- Open and unlock the 1Password app.
- Select your account or collection at the top of the sidebar.
- Turn on Windows Hello in the app.
- Navigate to Settings > Developer.
- Select Integrate with 1Password CLI.


- Open and unlock the 1Password app.
- Select your account or collection at the top of the sidebar.
- Navigate to Settings > Security.
- Turn on Unlock using system authentication.
- Navigate to Settings > Developer.
- Select Integrate with 1Password CLI.


Step 2: Sign in with SSO
Once the 1Password app integration is turned on, open the terminal and type op signin
. Use the arrow keys to select your SSO-enabled account from the list of all accounts added to your 1Password app. 1Password CLI will prompt you to authenticate.
After you sign in for the first time, 1Password CLI will automatically sign in to your most recently used account.
If you want to sign in to a different account, you can use the --account
flag or an environment variable.
Get help
If the 1Password account you sign in to with SSO doesn't allow biometric unlock, you'll be prompted to allow 1Password CLI access to the 1Password app when you sign in.