Identity and Access
Password managers for business
The password manager holds the credentials to everything else you own, which makes it the highest value target in your environment and the one place worth getting right. Licensed monthly, supported by Nuformat, available across Canada and the United States.
Offboarding is the failure most organizations do not plan for. When someone leaves, every system they touched needs their access revoked, and the password manager is the one where missing that step matters most. SCIM provisioning does it automatically from your identity provider, which is why it is standard on 1Password Business rather than an upgrade.
What it covers
| What it means in practice | |
|---|---|
| Shared vaults | Credentials a team needs in common, scoped by group, with view only, fill only or full edit permissions |
| Private vaults | One per person, which administrators cannot read. This is what makes people actually use it |
| SCIM provisioning | Accounts created and revoked automatically from Microsoft Entra ID, Okta, Google Workspace and others |
| Single sign-on | Your existing MFA and conditional access rules apply here too |
| Watchtower | Flags weak passwords, reused passwords, logins missing two-factor, and anything found in a known breach |
| Developer tools | SSH key signing, Git commit signing, a CLI, and secrets in CI/CD pipelines |
| Data residency | Encrypted data stored in Canada, the United States or the EU, chosen at setup |
Canadian data residency
Encrypted data can be stored in Canada, the United States or the European Union, chosen when the account is created rather than changed later. For organizations with provincial privacy obligations or contractual residency requirements, that is usually the first question asked and the one that decides whether a product is viable at all.
Frequently asked questions
Which password manager should a business buy?
1Password Business covers the range: shared vaults scoped by group, private vaults administrators cannot read, single sign-on, and SCIM provisioning. It is priced per user with no minimum, so a team of five and a team of five hundred buy the same product.
Why does SCIM provisioning matter?
It revokes a departing employee's password manager access automatically when they are removed from your identity provider. Done by hand that step gets missed, and the password manager holds the credentials to everything else you own.
Can our password vault data stay in Canada?
Yes. 1Password offers data residency in Canada, the United States and the European Union, chosen when the account is created. Canadian organizations with residency obligations can keep encrypted data in Canada.
Is a password manager worth it if we already use Microsoft Entra ID?
Usually yes. Entra ID handles the accounts you federate. A password manager covers everything you cannot federate, which in most organizations is the majority of credentials: vendor portals, shared service accounts, API tokens and SSH keys.
Plan features and limits as published by 1Password. Pricing, availability and residency options confirmed by Nuformat at the time of order. Get a quote.
