# Fewer lockouts, less manual work: What's new for 1Password EPM admins

DevFeed: [Fewer lockouts, less manual work: What's new for 1Password EPM admins](<https://devfeed.tech/articles/fewer-lockouts-less-manual-work-what-s-new-for-1password-epm-admins-1972.md>)

Original publisher: [Read original article](<https://1password.com/blog/whats-new-for-1password-epm-admins>)

Author: info@1password.com (Jairo Camacho)

Published: 2026-08-26T00:00:00Z

Content type: release

Language: en

Sources: [Blog on 1Password Blog](<https://devfeed.tech/sources/blog-on-1password-blog.md>)

Topics: [Provisioning](<https://devfeed.tech/topics/provisioning.md>), [Multi-tenancy](<https://devfeed.tech/topics/multi-tenancy.md>), [Entra ID](<https://devfeed.tech/topics/entra-id.md>), [releases](<https://devfeed.tech/topics/releases.md>), [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>)

Tags: [documentation](<https://devfeed.tech/tags/documentation.md>), [entra-id](<https://devfeed.tech/tags/entra-id.md>), [identity](<https://devfeed.tech/tags/identity.md>), [integration](<https://devfeed.tech/tags/integration.md>), [multi-tenancy](<https://devfeed.tech/tags/multi-tenancy.md>), [news](<https://devfeed.tech/tags/news.md>), [outage](<https://devfeed.tech/tags/outage.md>), [releases](<https://devfeed.tech/tags/releases.md>), [scale](<https://devfeed.tech/tags/scale.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

1Password announces releases for EPM admins focused on reducing lockouts and automating provisioning at scale. The updates include Entra ID secret-expiration tracking with reminders and guided rotation, integration between Multi-Tenancy and Automated Provisioning, and Vault Migrations for populating shared vaults in linked accounts.

## Source excerpt

As a company grows, more employees join, but the size of the IT team overseeing critical systems often doesn't grow at the same pace. Admins have to be intentional about prioritizing their efforts to meet the needs of a growing organization. That's why we're excited to announce several releases aimed at helping admins optimize their organization's use of 1Password in two important areas: reducing lockouts and automating provisioning at scale. Preventing avoidable lockouts Entra ID Secret Expiration Most 1Password Business accounts sign in via SSO through an identity provider like Microsoft Entra ID. Admins rely on a secret provisioned by Entra to establish connectivity with 1Password. However, it comes with an expiration date. Once it expires, the connection breaks, preventing anyone from signing in. This was one of the most common and disruptive patterns we'd observe with customers. Entra ID Secret Expiration now tracks it for you. Simply record the expiration date, and 1Password will send escalating reminders across in-app banners, emails, and login prompts at a fixed cadence (e.g., 90/60/30 days). Once it's time to rotate the secret, follow the guided flow in the Admin Console, confirm it's working as intended, and the countdown resets automatically. A predictable secret expiration date should never become an outage, and now it doesn't have to. Standing up new parts of the business quickly Multi-Tenancy and Automated Provisioning integration Earlier this year we released Multi-Tenancy and Automated Provisioning, hosted by 1Password, two critical features for admins to manage provisioning, deprovisioning, and parent/child accounts at scale. Now admins can use these features in tandem, so enterprises with multi-tenant setups can take advantage of Automated Provisioning. To get started, check out our detailed documentation for setting up the Multi-Tenancy and Automated Provisioning integration To get started, check out our detailed documentation for setting up the M