1Password
By integrating 1Password with ThreatDefence via the 1Password Events Reporting API, you can seamlessly ingest user activity and security event data into ThreatDefence for centralized monitoring and response.
This integration enhances visibility into:
Password management behavior
Vault access
Policy enforcement
It enables more effective detection of insider threats, credential misuse, and compliance violations.
Requirements
Access to your 1Password admin account
An active 1Password service account (recommended for automation or API integration)
Step 1. Generate a 1Password Events API Token
Sign in to your account at 1password.com.
Select Integrations in the sidebar.
Under Events Reporting, click Add Integration.
Enter a name for the integration, for example: ThreatDefence - Log Integration.
Click Add Integration.
Click Add a Token, then enter a name for the token and choose an expiry (or leave as Never).
Select the event types the token should have access to:
Sign-in Attempts
Item Usages
Audit Event
Click Issue Token.
Copy the token value and store it securely.
⚠️ The token value cannot be retrieved again after closing this page.
For more information on issuing or revoking tokens, refer to the official 1Password guide: ➡ 1Password Events Reporting Guide
Step 2. Configure ThreatDefence Integration
Provide the following information to your ThreatDefence representative at support@threatdefence.com:
API Key (the token genertaed in Step 1)
Self Setup via TD Portal
If you prefer to configure the integration yourself, you can do so directly through the TD portal without contacting support.
Sign into TD Portal.
Navigate to Integrations → Add.
Select 1Password from the list of available integrations.
Enter your API Key (generated in Step 1 above).
Click ADD.
Support
For questions or assistance, please contact: 📧 support@threatdefence.com
Last updated