Most organizations can tell you which apps sit behind SSO. Far fewer can tell you what other apps teams are using, or who has access to the credentials.

Shared and sensitive non-SSO logins remain some of the hardest access paths to govern. Credentials are often tied to individuals, scattered across vaults and browsers, and difficult to rotate or revoke when roles change. For many teams, this creates a gap in their Zero Trust strategy.

For the last several months, we’ve been hard at work connecting 1Password Enterprise Password Manager and SaaS Manager to help close that gap. Today, we’re announcing several integrated features that help IT admins discover and govern shared and sensitive logins.

Extending governance beyond SSO

For more than a decade, 1Password Enterprise Password Manager (EPM) has helped thousands of businesses securely store and manage credentials and secrets. More recently, SaaS Manager has helped organizations discover shadow IT, manage employee access, and control SaaS spending. 

Now, we’re bringing these solutions together. 

When customers use Enterprise Password Manager and SaaS Manager together, they gain new capabilities: 

• Vault insights: Discover SaaS accounts from 1Password vault credentials for better IT visibility into sensitive and shared app use.

• Browser insights: Reveal login activity from the 1Password browser extension to show app usage, even when credentials aren’t saved in a company vault. 

• Account risk report: Identify high-risk accounts based on access risk, data sensitivity, privileges, and attack patterns.

• Account governance: Transfer control of sensitive accounts to IT to enable secure access control and auditability without exposing passwords.

Together, these capabilities extend Zero Trust governance beyond SSO and ensure that organizations can discover and secure credential-based access. 

What this enables for customers 

Now you can see exactly which applications rely on traditional credentials and understand who uses them and how. 

When an employee changes roles or leaves, teams can update or revoke access and rotate credentials. No more searching through vaults, chasing down shared logins, or wondering if old passwords are still active.

Every access change and credential rotation is automatically logged, giving compliance teams defensible records for frameworks such as SOC 2, ISO 27001, and HIPAA. What once took hours of manual follow-up becomes fast, consistent, and fully visible.

Ready to give it a try?

By combining credential management, SaaS visibility, and access governance, 1Password helps organizations apply Zero Trust principles across more of their real access environment, not just the apps behind SSO.

If you already have EPM and SaaS Manager, you can enable these capabilities in your environment now. Reach out to your account manager or contact us to learn more.

If you use only  Enterprise Password Manager, adding SaaS Manager unlocks the broader set of governance and visibility capabilities. Contact us to learn more and explore how SaaS Manager can help your organization. 

The future of access isn’t about forcing every app behind SSO. It’s about meeting teams where they work and governing access responsibly as they grow.