baton-1password
is a connector for 1Password built using the Baton SDK. It communicates with the 1Password CLI tool to sync data about account, users, groups and vaults.
Check out Baton to learn more about the project in general.
- 1Password Families, Teams, Business or Enterprise plan (https://1password.com/business-pricing).
- 1Password 8 app installed. Please refer to requirements based on your OS.
- Installed 1Password CLI Tool on your local machine. For first time install please refer to the Install chapter. It is not neccessary to do any other steps as the
baton-1password
will take care of creating an account and signing in. If you already have the CLI tool installed but need to upgrade it to the latest version please refer to this article.
brew install conductorone/baton/baton conductorone/baton/baton-1password
baton-1password
baton resources
go install github.com/conductorone/baton/cmd/baton@main
go install github.com/conductorone/baton-1password/cmd/baton-1password@main
BATON_ADDRESS=myaddress.1password.com baton-1password
baton resources
baton-1password
pulls down information about the following 1password resources:
- Account
- Users
- Groups
- Vaults
We started Baton because we were tired of taking screenshots and manually building spreadsheets. We welcome contributions, and ideas, no matter how small -- our goal is to make identity and permissions sprawl less painful for everyone. If you have questions, problems, or ideas: Please open a Github Issue!
See CONTRIBUTING.md for more details.
baton-1password
Usage:
baton-1password [flags]
baton-1password [command]
Available Commands:
capabilities Get connector capabilities
completion Generate the autocompletion script for the specified shell
help Help about any command
Flags:
--address string required: Sign in address of your 1Password account ($BATON_ADDRESS)
--client-id string The client ID used to authenticate with ConductorOne ($BATON_CLIENT_ID)
--client-secret string The client secret used to authenticate with ConductorOne ($BATON_CLIENT_SECRET)
-f, --file string The path to the c1z file to sync with ($BATON_FILE) (default "sync.c1z")
-h, --help help for baton-1password
--limit-vault-permissions strings Limit ingested vault permissions: allow_editing, allow_managing, allow_viewing, archive_items, copy_and_share_items, create_items, delete_items, edit_items, export_items, import_items, manage_vault, member, print_items, view_and_copy_passwords, view_item_history, view_items ($BATON_LIMIT_VAULT_PERMISSIONS)
--log-format string The output format for logs: json, console ($BATON_LOG_FORMAT) (default "json")
--log-level string The log level: debug, info, warn, error ($BATON_LOG_LEVEL) (default "info")
-p, --provisioning This must be set in order for provisioning actions to be enabled ($BATON_PROVISIONING)
--skip-full-sync This must be set to skip a full sync ($BATON_SKIP_FULL_SYNC)
--ticketing This must be set to enable ticketing support ($BATON_TICKETING)
-v, --version version for baton-1password
Use "baton-1password [command] --help" for more information about a command.