1Password SaaS Manager

New

• Workflows – 7-Day Expiry Option: A “7 days” option has been added to the workflow inactivity reset dropdown. This joins the existing options (Immediately, 30, 60, 90, and 180 days, and 1 year) and applies across License, App, Asset, Person, and Task filter triggers.
• OpenAI Platform – Admin Key Requirement Clarified: The OpenAI Platform integration setup description has been updated to clarify that an Admin key is required, not just any API key. This should reduce failed connection attempts when setting up AI consumption tracking.
• 1Password Integration – Updated SCIM Terminology: References to “SCIM Bridge” in the 1Password integration have been updated to “SCIM” to align with 1Password’s current hosted provisioning model. Field labels and helper text now reflect this change, with updated links to the relevant support documentation.
• Integrations – Logo Initials Fallback: Integration and provider tiles now display a generated initials badge when no logo is available. This provides a consistent visual experience for integrations that don’t have an uploaded logo.

Fixed

• Devices: Fixed an issue where a device sourced from multiple integrations could be incorrectly editable. Attempting to save a duplicate device name now returns a clear error message rather than a generic failure.
• Public API – App User Filters: Fixed an issue where filtering app users by email or name through the public API, GET /api/apps/v1/{appId}/users, silently returned empty results. These filters now return the correct matching data.
• Public API – OpenAPI Documentation: Tightened the OpenAPI specification definitions across Apps, Core, and Workflow responses. This includes a corrected route parameter for the Applications PATCH endpoint ({id} → {appId}) and improved required/nullability annotations for several response fields, bringing the documentation in line with actual API behavior.
• Google Workspace – Generate User Verification Codes: Fixed an intermittent failure in the “Generate User Verification Codes” workflow step. The step could fail when Google’s API experienced a short propagation delay after generating codes. Automatic retry logic has been added to handle this transparently, so the step should now succeed without requiring manual workflow intervention.
• Google Workspace – 401 Error Messaging: Improved the error messages shown when a Google Workspace workflow action fails due to insufficient permissions on the connected account. The error now clearly explains that a Super Admin role is required when managing other admin users, and links to the relevant setup documentation.
• 1Password Integration – Non-ASCII Characters in Bearer Token: Fixed a sync failure that occurred when the 1Password SCIM bearer token contained non-ASCII characters, typically caused by copying the token from a rich-text editor. The token is now automatically sanitized before use.
• Microsoft Entra ID – Roles Missing for Mixed-Case UPN: Fixed an issue where users with directly assigned Microsoft Entra directory roles did not have those roles reflected in SaaS Manager. This occurred when Microsoft Graph returned the User Principal Name (UPN) in mixed case, for example User@domain.com, causing the role lookup to fail silently.
• Cursor – Missing User Mappings on First Sync: Fixed an issue where the Cursor AI usage integration reported mapping errors for user emails that were already present in the account. This was preventing the integration from being successfully enabled.
• 1Password – User Deletion Sync: Fixed an issue where SaaS Manager users were not automatically removed when their corresponding 1Password accounts were deleted (rather than purged). People data will now stay in sync when 1Password accounts are removed directly.