1Password

Use 1Password data with Cortex XSIAM.

Important

This connector is only available for tenants that onboarded after July 26, 2026. For tenants that onboarded before this date, use Marketplace to access the standalone integration. For more information, see Marketplace.

This connector is available with any active Cortex XSIAM license.

1Password is a password manager used for storing and managing your account credentials, financial information, documents, and other sensitive data. This connector fetches events about actions performed by 1Password users within a specific account, access and modifications to items in shared vaults, and user sign-in attempts.

This connector includes the following sub-capabilities (Marketplace integrations link to PAN DEV for more information):

• OnePassword: Fetch events about actions performed by 1Password users within a specific account, access and modifications to items in shared vaults, and user sign-in attempts.

To configure this connector, follow the steps outlined in the configuration wizard.