1Password

Tested Versions

Assumptions

This example makes the following assumptions:

Authelia Root URL: https://{{< sitevar name="subdomain-authelia" nojs="auth" >}}.{{< sitevar name="domain" nojs="example.com" >}}/
Client ID: 1password

Some of the values presented in this guide can automatically be replaced with documentation variables.

Configuration

Authelia

The following YAML configuration is an example Authelia client configuration for use with 1Password which will operate with the application example:

yaml

identity_providers:
  oidc:
    ## The other portions of the mandatory OpenID Connect 1.0 configuration go here.
    ## See: https://www.authelia.com/c/oidc
    clients:
      - client_id: '1password'
        client_name: '1Password'
        public: true
        authorization_policy: 'two_factor'
        require_pkce: true
        pkce_challenge_method: 'S256'
        redirect_uris:
          - ''  # See step 5 below.
        scopes:
          - 'openid'
          - 'email'
          - 'profile'
        response_types:
          - 'code'
        grant_types:
          - 'authorization_code'
        access_token_signed_response_alg: 'none'
        userinfo_signed_response_alg: 'none'
        token_endpoint_auth_method: 'none'

Application

To configure 1Password there is one method, using the Web GUI.

Web GUI

To configure 1Password to utilize Authelia as an OpenID Connect 1.0 Provider, use the following instructions:

Sign in to your 1Password.
Select Other from the list of identity providers and select Next.
Select Other from the identity provider list.
Configure the following options:

Client ID: 1password
Well-known URL: https://{{< sitevar name="subdomain-authelia" nojs="auth" >}}.{{< sitevar name="domain" nojs="example.com" >}}/.well-known/openid-configuration

Copy the listed Redirect URIs and configure the Authelia redirect_uris option.