Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
22 changes: 11 additions & 11 deletions baton/1password.mdx
Original file line number Diff line number Diff line change
@@ -1,17 +1,17 @@
---
title: "Set up 1Password connector"
description: "C1 provides identity governance and just-in-time provisioning for 1Password. Integrate your 1Password instance with C1 to run user access reviews (UARs) and enable just-in-time access requests."
description: "C1.ai provides identity governance and just-in-time provisioning for 1Password. Integrate your 1Password instance with C1.ai to run user access reviews (UARs) and enable just-in-time access requests."
og:title: "Set up 1Password connector"
og:description: "C1 provides identity governance and just-in-time provisioning for 1Password. Integrate your 1Password instance with C1 to run user access reviews (UARs) and enable just-in-time access requests."
og:description: "C1.ai provides identity governance and just-in-time provisioning for 1Password. Integrate your 1Password instance with C1.ai to run user access reviews (UARs) and enable just-in-time access requests."

Check warning on line 5 in baton/1password.mdx

View check run for this annotation

Mintlify / Mintlify Validation (conductorone) - vale-spellcheck

baton/1password.mdx#L5

Did you really mean 'UARs'?
sidebarTitle: "1Password"
---

<Tip>
**Why does this connector look different from most others?**

Unlike most of the software C1 integrates with, 1Password doesn’t expose APIs that can be used to connect the two systems. Additionally, 1Password data can only be gathered from unlocked vaults, which means that a user must unlock the vault and manually kick off the data collection process; a periodic automated data pull won’t work.
Unlike most of the software C1.ai integrates with, 1Password doesn’t expose APIs that can be used to connect the two systems. Additionally, 1Password data can only be gathered from unlocked vaults, which means that a user must unlock the vault and manually kick off the data collection process; a periodic automated data pull won’t work.

To work around these issues, C1’s [1Password Baton connector](https://github.com/conductorone/baton-1password) uses the [1Password CLI](https://developer.1password.com/docs/cli/) to interact with your vaults. Once the CLI is set up, `baton-1password` uses it to interact with your 1Password vaults. The connector will capture user and entitlement data in a file that you upload to C1.
To work around these issues, C1.ai’s [1Password Baton connector](https://github.com/conductorone/baton-1password) uses the [1Password CLI](https://developer.1password.com/docs/cli/) to interact with your vaults. Once the CLI is set up, `baton-1password` uses it to interact with your 1Password vaults. The connector will capture user and entitlement data in a file that you upload to C1.ai.
</Tip>

## Capabilities
Expand All @@ -30,14 +30,14 @@
<Warning>
**To complete this task, you’ll need:**

- The **Connector Administrator** or **Super Administrator** role in C1
- The **Connector Administrator** or **Super Administrator** role in C1.ai
- [1Password 8](https://1password.com/downloads/mac/) on a Families, Teams, Business, or Enterprise plan
- A 1Password vault
</Warning>

<Tabs>
<Tab title="Cloud-hosted">
**Follow these instructions to use a built-in, no-code connector hosted by C1.**
**Follow these instructions to use a built-in, no-code connector hosted by C1.ai.**

*Cloud-hosted connector not currently available.*
</Tab>
Expand Down Expand Up @@ -90,11 +90,11 @@
</Step>
</Steps>

### Step 3: Configure the 1Password connector in C1
### Step 3: Configure the 1Password connector in C1.ai

<Steps>
<Step>
In C1, navigate to **Apps** > **Connectors** and click **Add connector**.
In C1.ai, navigate to **Apps** > **Connectors** and click **Add connector**.
</Step>
<Step>
Search for **Baton** and click **Add**.
Expand Down Expand Up @@ -132,14 +132,14 @@
Run `baton-1password --help` to see the list of flags to be used when passing your credentials to the connector.
</Step>
<Step>
The connector syncs current data, uploads it to C1, and prints a `Task complete!` message when finished.
The connector syncs current data, uploads it to C1.ai, and prints a `Task complete!` message when finished.
</Step>
<Step>
Check that the connector data uploaded correctly. In C1, click **Apps**. On the **Managed apps** tab, locate and click the name of the application you added the Baton connector to. The data should be found on the **Resources** and **Accounts** tabs, as appropriate.
Check that the connector data uploaded correctly. In C1.ai, click **Apps**. On the **Managed apps** tab, locate and click the name of the application you added the Baton connector to. The data should be found on the **Resources** and **Accounts** tabs, as appropriate.
</Step>
</Steps>

**That’s it!** Your 1Password connector is now pulling access data into C1
**That’s it!** Your 1Password connector is now pulling access data into C1.ai
</Tab>
</Tabs>

Expand Down
24 changes: 12 additions & 12 deletions baton/_release-notes.mdx
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Connector release notes"
sidebarTitle: "Release notes"
description: "Here you'll find the latest on new connectors, connector updates, and other connector news from C1."
description: "Here you'll find the latest on new connectors, connector updates, and other connector news from C1.ai."
---

{/* Editor Refresh: 2026-09-11 */}
Expand Down Expand Up @@ -58,7 +58,7 @@

* The [Okta](/baton/okta) connector adds `update_profile` and `update_user` connector actions.

* The [Salesforce Tableau](/baton/tableau) connector now tracks license tiers by site role and purchased/consumed seat counts for use with C1 License Management.
* The [Salesforce Tableau](/baton/tableau) connector now tracks license tiers by site role and purchased/consumed seat counts for use with C1.ai License Management.

### File connector updates

Expand Down Expand Up @@ -321,7 +321,7 @@

* The [Claude Enterprise](/baton/claude-enterprise) connector now supports a **Compliance API mode** (recommended) that syncs all users and groups — including console-invited identities, not just SCIM-provisioned ones — and streams usage events from the activity feed. Configure a Compliance Access Key alongside optional SCIM credentials to enable this mode.

* The [Salesforce](/baton/salesforce) connector now syncs **Agents** (Agentforce agents and Einstein Bots) as an opt-in resource type. Enable the Agent resource type in C1 to include them in syncs.
* The [Salesforce](/baton/salesforce) connector now syncs **Agents** (Agentforce agents and Einstein Bots) as an opt-in resource type. Enable the Agent resource type in C1.ai to include them in syncs.

* The [Workday](/baton/workday) connector now offers a new **Custom Report with API Client** authentication option, combining RaaS custom reports with OAuth for environments that require OAuth without an Integration System User.

Expand Down Expand Up @@ -560,7 +560,7 @@

* The [Coupa](/baton/coupa) connector now supports syncing and provisioning for Account Groups. This resource type is opt-in.

* The [Dayforce](/baton/dayforce) connector now supports account provisioning (hiring new employees) and role provisioning (granting and revoking security role assignments on existing employees). Account deprovisioning is not supported — C1 removes access by revoking role grants rather than deleting employee records.
* The [Dayforce](/baton/dayforce) connector now supports account provisioning (hiring new employees) and role provisioning (granting and revoking security role assignments on existing employees). Account deprovisioning is not supported — C1.ai removes access by revoking role grants rather than deleting employee records.

* The [Microsoft Entra](/baton/microsoft-entra) connector now includes an option to skip enterprise applications with no app role assignments. Enabling **Skip enterprise applications without assignments** can substantially reduce sync output in tenants with many auto-registered service principals.

Expand Down Expand Up @@ -676,7 +676,7 @@

* The [Slack Enterprise Grid](/baton/slack-enterprise) connector now supports provisioning for user groups.

* The [Microsoft Entra ID](/baton/microsoft-entra) connector now supports a `create_group` connector action that lets you create new groups in Microsoft Entra ID directly from C1.
* The [Microsoft Entra ID](/baton/microsoft-entra) connector now supports a `create_group` connector action that lets you create new groups in Microsoft Entra ID directly from C1.ai.

* The [Netsuite](/baton/netsuite) connector now supports syncing custom employee fields. We've added a new configuration field to support this capability.

Expand Down Expand Up @@ -713,7 +713,7 @@

- The [Google Workspace](/baton/google-workspace) connector has two new connector actions: **Modify group settings** lets you update group options such as allowing external members, enabling web posting, controlling who can post, and adjusting the message moderation level. **Update user manager** lets you change a user's manager relationship so that reporting, directory entries, and manager-based workflows reflect the new manager.

- The [Active Directory](/baton/active-directory) connector now supports syncing custom user attributes. Use the `custom-user-attributes` configuration option to specify additional LDAP attribute names to include in user profiles in C1, where they can be used for account correlation.
- The [Active Directory](/baton/active-directory) connector now supports syncing custom user attributes. Use the `custom-user-attributes` configuration option to specify additional LDAP attribute names to include in user profiles in C1.ai, where they can be used for account correlation.

- The [LDAP](/baton/ldap) connector now supports POSIX account provisioning with automatic UID number assignment. When creating a new POSIX account, the connector can look up the highest `uidNumber` currently in use and assign the next available value automatically.

Expand Down Expand Up @@ -815,7 +815,7 @@

### Connector capability updates
- The [Docusign](/baton/docusign) connector now syncs signing groups and supports provisioning for groups, signing groups, and permission profiles. The connector also now supports account deprovisioning.
- When the [Workday](/baton/workday) connector is configured using a custom report, you can now specify additional fields from Workday user data to be included in the user profiles in C1. We've added a new configuration field to support this capability.
- When the [Workday](/baton/workday) connector is configured using a custom report, you can now specify additional fields from Workday user data to be included in the user profiles in C1.ai. We've added a new configuration field to support this capability.
- The [Microsoft Entra ID](/baton/microsoft-entra) connector can now be configured to support provisioning users as members of exchange groups. See the connector's docs for details on additional required configuration steps of you want to use this capability.
</Update>

Expand All @@ -831,7 +831,7 @@

### Connector capability updates
- You can now configure the [Microsoft Azure DevOps](/baton/azure-devops) connector to perform "incremental syncs", which means reading audit logs and capturing updates between full syncs. We've added a new configuration field to support this capability.
- When setting up the [ServiceNow](/baton/servicenow) connector, you can now specify a list of allowed email domains. The email address associated with an account must be associated with one of these allowed domains in order to be synced to C1. We've added a new configuration field to support this capability.
- When setting up the [ServiceNow](/baton/servicenow) connector, you can now specify a list of allowed email domains. The email address associated with an account must be associated with one of these allowed domains in order to be synced to C1.ai. We've added a new configuration field to support this capability.
</Update>

<Update label="November 21, 2025">
Expand Down Expand Up @@ -966,7 +966,7 @@
</Columns>

### Connector monitoring
- When a significant drop in resources is detected during a connector sync, C1 does not immediately apply the change as a precaution against unintentionally removing access. Click **Confirm changes** in the banner on the application's page to let C1 know that the change is expected and that it's safe to proceed.
- When a significant drop in resources is detected during a connector sync, C1.ai does not immediately apply the change as a precaution against unintentionally removing access. Click **Confirm changes** in the banner on the application's page to let C1.ai know that the change is expected and that it's safe to proceed.

### Connector capability updates
- The [Oracle Identity Cloud Service](/baton/oracle-idcs) connector can be used to access data from and provision access to Oracle apps including **Work and Asset Cloud Service (Oracle WACS)** and **Customer Cloud Service (Oracle CCS)**.
Expand Down Expand Up @@ -1163,7 +1163,7 @@
</Columns>

### Connector capability updates
- You can now use a GitHub app to configure the [GitHub Enterprise](/baton/github-enterprise) connector. When using this config method, you must set up a separate app and connector for each GitHub organization you want to integrate with C1.
- You can now use a GitHub app to configure the [GitHub Enterprise](/baton/github-enterprise) connector. When using this config method, you must set up a separate app and connector for each GitHub organization you want to integrate with C1.ai.
- The [Atlassian](/baton/atlassian) connector now supports provisioning workplace roles.
- The [AWS](/baton/aws) connector now supports org-level access and shows grant sources for permission sets.

Expand Down Expand Up @@ -1266,7 +1266,7 @@

### Connector capability updates
- The [Workday Account](/baton/workday-wql) connector now syncs user-based security groups as a separate resource type from other security groups. The connector also now supports provisioning for user-based security groups. New configuration fields on the connector have been added to support these capabilities.
- You can now use a GitHub app to configure the [GitHub](/baton/github) connector. When using this config method, you must set up a separate app and connector for each GitHub organization you want to integrate with C1.
- You can now use a GitHub app to configure the [GitHub](/baton/github) connector. When using this config method, you must set up a separate app and connector for each GitHub organization you want to integrate with C1.ai.
- The [ServiceNow](/baton/servicenow) connector now supports account, role, and group provisioning.

### Backend fixes and updates
Expand Down Expand Up @@ -1307,7 +1307,7 @@
- [Zendesk v2](/baton/zendesk) - Adds support for syncing roles and provisioning roles, orgs, and groups. Learn more about [connector versions and migration](/baton/migration).

### Connector capability updates
- You can now specify which [user attributes](/product/admin/attributes) a connector syncs to C1. Go to [Select which attributes a connector syncs](/baton/configure/) to get started.
- You can now specify which [user attributes](/product/admin/attributes) a connector syncs to C1.ai. Go to [Select which attributes a connector syncs](/baton/configure/) to get started.
- A new configuration field on the [Snyk](/baton/snyk) connector adds support for users who use regional hostnames other than `api.snyk.io`.
- We've added a configuration field to the [Okta AWS Federation](/baton/okta-aws-federation) connector that opts into the conversion of user assignments to direct assignments.

Expand Down Expand Up @@ -1352,13 +1352,13 @@
- The [Grafana](/baton/grafana) connector now supports account provisioning.
- The [Asana](/baton/asana) connector now supports account provisioning and has a new configuration option to add the ID of the workspace where newly created accounts should be added.
- The [Incident.io](/baton/incident-io) connector now syncs basic and custom roles.
- To improve performance, the [Okta AWS Federation](/baton/okta-aws-federation) connector now requires that identities be pulled from an Okta connector.

Check warning on line 1355 in baton/_release-notes.mdx

View check run for this annotation

Mintlify / Mintlify Validation (conductorone) - vale-spellcheck

baton/_release-notes.mdx#L1355

Did you really mean 'Okta'?

### Backend fixes and updates
- NetSuite
- Salesforce v2
- Jira Cloud

Check warning on line 1360 in baton/_release-notes.mdx

View check run for this annotation

Mintlify / Mintlify Validation (conductorone) - vale-spellcheck

baton/_release-notes.mdx#L1360

Did you really mean 'Jira'?
- Rootly

Check warning on line 1361 in baton/_release-notes.mdx

View check run for this annotation

Mintlify / Mintlify Validation (conductorone) - vale-spellcheck

baton/_release-notes.mdx#L1361

Did you really mean 'Rootly'?
</Update>


Loading