# Automating SOC workflows with 1Password Enterprise Password Manager

DevFeed: [Automating SOC workflows with 1Password Enterprise Password Manager](<https://devfeed.tech/articles/automating-soc-workflows-with-1password-enterprise-password-manager-1904.md>)

Original publisher: [Read original article](<https://1password.com/blog/automating-soc-workflows-with-1password-enterprise-password-manager>)

Author: info@1password.com (Clarence Wong)

Published: 2026-03-17T00:00:00Z

Content type: release

Language: en

Sources: [Blog on 1Password Blog](<https://devfeed.tech/sources/blog-on-1password-blog.md>)

Topics: [SOC](<https://devfeed.tech/topics/soc.md>), [API](<https://devfeed.tech/topics/api.md>), [Automation](<https://devfeed.tech/topics/automation.md>), [OAuth 2.0](<https://devfeed.tech/topics/oauth2.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [apis](<https://devfeed.tech/tags/apis.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [automation](<https://devfeed.tech/tags/automation.md>), [building-1password](<https://devfeed.tech/tags/building-1password.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [developers](<https://devfeed.tech/tags/developers.md>), [integrations](<https://devfeed.tech/tags/integrations.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [security](<https://devfeed.tech/tags/security.md>), [security-operations-center](<https://devfeed.tech/tags/security-operations-center.md>), [soc](<https://devfeed.tech/tags/soc.md>), [workflows](<https://devfeed.tech/tags/workflows.md>)

## AI overview

1Password announces the public preview of its Users API for Partners and new security automation integrations for Enterprise Password Manager. The capabilities let SOC teams programmatically suspend or restore users when risk is detected, using OAuth 2.0 authentication and delegated, scoped authorization within coordinated security workflows.

## Source excerpt

Introducing our Users API for Partners in public preview and new Security Automation integrations that enable SOC teams to execute programmatic user actions within automated workflows in 1Password Enterprise Password Manager. Modern security teams increasingly rely on integrated security operations center (SOC) workflows that correlate signals and alerts, while orchestrating detection responses in real time. Behind every alert is an identity: a person, a service account, an API key, or an AI agent. However, when remediation requires manual steps, investigation and response slows, increasing security risks. Organizations are also expected to maintain continuous compliance via clearly enforced access controls and auditable processes. Today, 1Password is expanding the 1Password Enterprise Password Manager (EPM) through the public preview of the Users API for Partners, enabling security teams to respond to incidents faster during active security events. Powered by the Users API for Partners, security automation integrations with partners like CrowdStrike, in addition to BlinkOps, Elastic, Sumo Logic, Tines, and Torq enable mutual customers to automatically suspend or restore users in EPM when risk is detected. Together, these capabilities embed identity actions programmatically into coordinated SOC workflows. Moving from visibility to response with the Users API for Partners The Users API for Partners, now in public preview, enables execution of user-related actions within 1Password EPM. The API uses OAuth 2.0-based authentication designed for secure, enterprise-grade security. This enables ecosystem partners to build integrations for 1Password Enterprise Password Manager and use delegated, scoped authorization to list users, suspend access when risk is detected, and restore access after remediation. We're also introducing api.1Password.com as the single access point to 1Password APIs, accessible to ecosystem partners looking to build solutions with 1Password. The Users