Desktop app steals focus when okta session expires

gblues
gblues
Community Member

I am using 1Password in a corporate setting, and as such I do not have control over things like session length. After signing into 1password (whether it be directly in the desktop app or via the chrome plugin), after 10 minutes the session times out. The session timeout is normal and expected, but the way the timeout is handled by the desktop app is extremely frustrating.

Expected behavior: the app UI updates in the background, and the next time I need to look up a password I am prompted to sign in again.

Actual behavior: the app steals focus from whatever I am doing to bring up the "Sign in with Okta" prompt.

I use multiple workspaces, so when this happens it will force-switch me to the workspace where the 1password app is running. This makes the focus-stealing even more distruptive and disorienting.


1Password Version: 1Password for Mac 8.10.40 (81040031)
Extension Version: N/A
OS Version: macOS 14.6.1
Browser: N/A

Comments

  • Hello @gblues! 👋

    I'm sorry that 1Password is being unexpectedly focused, I suspect that you might be running into a known issue that our development team is investigating. Could you try the following steps:

    1. Open and unlock 1Password for Mac.
    2. Make sure that you are signed into the app: How to add another 1Password account to the apps and browser extension
    3. Click on 1Password next to the  in the menu bar.
    4. Click Settings.
    5. Click Browser.
    6. Toggle the "Connect with 1Password in the browser" setting.

    If that doesn't work then can you tell me if this is a new issue that you recently started running into? Or is it something that you've seen for some time?

    -Dave

    ref: dev/core/core#31951

  • gblues
    gblues
    Community Member

    I've only been with the company a few months and did not use 1Password prior, so I can't provide any regression-related information beyond "at least since June"

    I have done the following:

    • Turned off the setting mentioned in your reply (thank you)
    • Signed into the 1Password chrome extension via Okta and the 1password website instead of the desktop app
    • quit the desktop app

    I'll keep you posted as to what happens when the okta session times out.

  • @gblues

    Thanks for the reply. To clarify, the steps ask you to make sure that you're signed into your 1Password account (your work account which uses Okta) using the desktop app and to toggle the "Connect with 1Password in the browser" setting off and then back on. I'm not sorry for not being clear.

    -Dave

  • gblues
    gblues
    Community Member

    Follow-up:

    note that I'm just seeing the clarification to turn the "connect with 1password in the browser" back on after turning it off. I'll see what happens when I do that.

    Turning off the setting and fully quitting the app (meaning: clicking the icon in the System Bar and choosing "Quit 1Password") stops the focus stealing, but introduces a different issue: since I'm using multiple chrome profiles concurrently, I can only sign in with one of the two profiles. When I try to sign in with the other profile, I get as far as generating the approval token and then when I go to paste it in it gives an error: "Enrollment no longer exists or was cancelled by another device." To be clear, I don't think this is a bug, but more likely to be due to okta configuration.

    So, at this point I've gone in and re-enabled the "Connect with 1password in the browser" setting, we'll see how it goes.

  • @gblues

    Thanks for the reply. Keeping "Connect with 1Password in the browser" turned off will disable the shared lock state between the desktop app and 1Password in all of your browser files and I recommend that you keep it on after toggling it off and then back on.

    By turning "Connect with 1Password in the browser" off and then back on certain support files are regenerated by the desktop app which should allow you to avoid the focus issue that you reported seeing. If you do see the focus issue again then please let me know.

    -Dave