> For the complete documentation index, see [llms.txt](https://support.turngate.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.turngate.io/setup/integrations/1password.md).

# 1Password

Turngate ingests audit events, sign-in attempts, and item usage events from your 1Password Business account so you can investigate vault access and administrative activity.

## Setting Up

### Preparing your 1Password Account

To set up the 1Password integration you need to be an **Owner** or member of the **Team Members Manager** group on a **1Password Business** account. The Events API used by this integration is not available on 1Password Families, Individual, or Teams plans.

{% stepper %}
{% step %}

## Sign in to your 1Password account

Sign in to your 1Password account at `https://<your-account>.1password.com`.
{% endstep %}

{% step %}

## Open Integrations

Click **Integrations** in the sidebar.
{% endstep %}

{% step %}

## Add an integration under Events Reporting

Under **Events Reporting**, click **Other** (or the **Add Integration** button if you have existing integrations).
{% endstep %}

{% step %}

## Name the integration

Give the integration a descriptive name (e.g. `Turngate`) and click **Add Integration**.
{% endstep %}

{% step %}

## Choose the event types

On the next screen, choose which event types you want Turngate to be able to read. We recommend enabling all three:

* **Sign-in attempts**
* **Item usage**
* **Audit events**
  {% endstep %}

{% step %}

## Set the expiration

Set an **Expires** value that matches your internal token-rotation policy (the maximum is currently set by 1Password).
{% endstep %}

{% step %}

## Issue the token

Click **Issue Token** and copy the token value. You will not be able to view it again.
{% endstep %}
{% endstepper %}

You will also need your **1Password account sign-in URL** (e.g. `https://acme.1password.com`) — Turngate uses this to determine the correct regional Events API endpoint.

### Setting up the 1Password Data Source in the Turngate App

Once you have your bearer token and account URL, head back to the Turngate App.

{% stepper %}
{% step %}

## Open Data Sources

Click **Data Sources** in the navigation bar on the left.
{% endstep %}

{% step %}

## Install 1Password

Click **Install** on the **1Password** selection.
{% endstep %}

{% step %}

## Name the Data Source

Give the Data Source a name for your own reference.
{% endstep %}

{% step %}

## Add your credentials

Paste in your **1Password account URL** and the **Bearer Token** you generated above.
{% endstep %}

{% step %}

## Install

Click **Install**.
{% endstep %}
{% endstepper %}

Turngate will validate the credentials and begin pulling events. The Events API supports historical lookback up to the retention window of your 1Password plan; Turngate will backfill what is available at install time.

## What Gets Ingested

* **Sign-in attempts** — successful and failed sign-ins, including client type, IP address, and country
* **Item usage** — which user accessed which item in which vault, and from what client
* **Audit events** — administrative actions such as user provisioning, group membership changes, vault permission changes, and policy updates

Turngate does **not** receive any vault item contents (passwords, secure notes, etc.) — only metadata about access and administration.

## Other Resources

* [1Password Events Reporting overview](https://support.1password.com/events-reporting/)
* [Events API reference](https://developer.1password.com/docs/events-api/)
* [Get started with Events Reporting](https://support.1password.com/events-reporting-other/)