.png)
Automate 1Password provisioning through Rippling so employees get secure credential access from day one and lose it immediately at offboarding.
The Rippling–1Password integration manages user lifecycle for your password management platform. New employees are provisioned into 1Password with access to the correct shared vaults based on their Rippling department. When they leave, their 1Password account and all vault access is revoked immediately as part of Rippling's offboarding workflow.
Password manager offboarding is one of the most overlooked security gaps. If 1Password isn't tied to Rippling's deprovisioning workflow, a terminated employee can retain access to every shared credential stored in their vaults — a significant risk given how much sensitive access password managers typically hold.
thePeopleStack configures SCIM provisioning between Rippling and 1Password, mapping department structure to vault access so employees see only the shared credentials relevant to their role, and validates immediate access revocation at offboarding.
1Password deployments for thePeopleStack's Rippling clients are structured around US SSO configurations and password vault access tied to department-based sharing rules.
Canadian and cross-border operations: for Canadian employees, 1Password provisioning follows the standard onboarding and offboarding workflow with no additional configuration required.
Yes. 1Password Business supports SCIM provisioning, allowing Rippling to automate account creation, updates, and deprovisioning tied to employment status.
Yes, through group mapping. Departments can be assigned to specific 1Password vaults, ensuring employees only access shared credentials relevant to their role.
When a termination is processed in Rippling, 1Password access is revoked immediately — a critical security control given that password managers often hold credentials to numerous other company systems.
1Password Business is required for SCIM provisioning and team vault features. thePeopleStack can advise on plan requirements during scoping.
Standard configuration takes 1–2 hours.
