1Password Device Trust Connect - Device Trust for SSO

Secure Every Device Before It Reaches Your Applications

1Password Device Trust Connect helps organizations establish device trust and enforce compliance requirements by empowering employees to self-remediate issues before accessing work applications. Available in two versions - Device Trust Core and Device Trust Connect - the solution fits the security needs of organizations at every stage of their zero trust journey.

How It Works

1Password Device Trust Connect sits between your identity provider and your protected applications, ensuring that only healthy, known devices can authenticate through SSO. When a device fails a health check, the employee is guided through a self-remediation workflow to resolve the issue independently - reducing the burden on IT teams and minimizing access disruptions.

Key Capabilities

Block Unknown and Unregistered Devices

Only devices registered to known users can log in via SSO, protecting your data even if attackers manage to steal valid credentials. This closes a critical gap that traditional identity solutions leave open - ensuring that a compromised password alone is not enough to gain access.

Enforce Compliance Requirements

Define what a healthy device looks like for your organization, then enforce it at every authentication. Device Trust includes a library of prebuilt Checks covering common requirements such as disk encryption, OS and browser updates, screen lock, and endpoint protection, and self-service templates let admins create custom Checks for their own policies and target them to specific people or device groups. MDM enrollment and management state are verified as part of this, making MDM one signal in a broader compliance picture rather than the only control.

Checks run continuously and are evaluated at the point of access across macOS, Windows, and Linux, on both managed and unmanaged devices. That gives security teams enforcement where it matters and gives auditors evidence that only compliant devices reached protected applications

Discover and Govern AI Tools on Your Endpoints

AI Insights shows which AI applications, browser tools, CLIs, IDE extensions, and MCP servers are running on employee devices, including tools adopted before IT has reviewed them. Admins can see who is using what, flag misconfigured or unsanctioned tools, and apply policy so AI usage is governed rather than invisible.

Device Trust also surfaces related risk on the endpoint, such as plaintext secrets that AI tools and agents could reach, giving security teams a path from discovery to remediation. Collection stays at the metadata level: which tool, which surface, how often. Prompt and conversation content is never inspected.

Employee Self-Remediation

When a device falls out of compliance, employees receive clear, actionable guidance to resolve the issue themselves. This approach reduces IT support tickets, accelerates time-to-compliance, and keeps employees productive without waiting for helpdesk intervention.

Seamless IdP Integration

Works alongside Okta, Google, and Entra to enforce device trust and device health policies before allowing access to managed applications. Device trust decisions are evaluated at the point of authentication, adding a layer of security without disrupting existing SSO workflows.

Use Cases

• Preventing credential-based attacks: Even when valid SSO credentials are compromised, Device Trust Connect blocks authentication from unrecognized or unhealthy devices, stopping access before it starts.
• Securing access from unmanaged endpoints: For organizations with contractors, Linux devices, remote workers, or BYOD policies, Device Trust Connect verifies device posture before granting access to sensitive web applications.
• Simplifying compliance posture: By continuously enforcing device health checks at the point of authentication, organizations can demonstrate that only compliant devices access protected resources - supporting audit and compliance objectives.

Get Started on AWS Marketplace

Deploy 1Password Device Trust Connect through AWS Marketplace to streamline procurement and consolidate billing. To learn more about implementation, supported configurations, or to discuss your organization's requirements, contact the 1Password team through the support channel provided in this listing.