Integrate 1Password EPM Users API for Automated Identity Isolation During Account Compromise
C
Chris Bareham
1Password announced in March they are "expanding Enterprise Password Manager (EPM) through the public preview of Users API for Partners, enabling security teams to respond to incidents faster during active security events." Would love to see this capability tied into the 1Password integration on Huntress, adding it as another part of the identity isolation.
If a user's O365 or Google Workspace account is identified as compromised, the 1Password account could also be tied into this flow of locking accounts. Not all customers use the SSO from their IdP to log into 1Password, so this would be a great capability to add in. "1Password EPM customers can now enable security automation integrations with CrowdStrike, as well as BlinkOps, Elastic, Sumo Logic, Tines, and Torq." Only a matter of time before Huntress is added to the list??
These integrations allow customers to:
- Automate identity response workflows
- Orchestrate enforcement of access policies
- Maintain audit-ready visibility
Announcement and details: https://1password.com/blog/automating-soc-workflows-with-1password-enterprise-password-manager