Signing back into the Community for the first time? You'll need to reset your password to access your account.  Find out more.

Forum Discussion

Jesper2665's avatar
Jesper2665
New Contributor
4 months ago

SCIM Azure UPN/Email

Hello! We have recently implemented a tiering model for servers/applications, and we are looking to do the same for 1Password. Having access codes associated with our regular account could pose a ...
scim
hemal_g_1p's avatar
hemal_g_1p
Icon for 1Password Team rank1Password Team
4 months ago

Thanks for explaining your usecase.

As you create the Enterprise Application for provisioning in Entra ID, the default mapping for provisioning users is based off the UPN attribute. You may change the 1Password Business Enterprise App, to provision users off the mail attribute instead of UPN, this can be found within the Enterprise Application > Mappings > User Mappings. Select the first line and change the source from UPN to mail.

Caution here in this step is it will also send email address change notification to those who have differentiating UPN and email since the attribute is a global setting within the enterprise app.

As side note(could be unrelated in your instance): for users leveraging Sso we advise this step of configuring optional UPN claims.