1Password plugin
For more information about what this plugin does and the data streams it retrieves, see:
Visualize your 1Password report data. This includes sign-in attempts and item usage.
The 1Password data source features the ability to do the following and more:
- Sign in events by category (table, donut, line graph)
- Sign in events by type (table, donut, line graph)
- Top N Failed Sign-ins
- Top N Most used logins
- Most used Items
- Track user adoption or retention
- Monitor spikes in failed logins and visualize the source country.
To add a data source click on the + next to Data Sources on the left-hand menu in SquaredUp. Search for the data source and click on it to open the Configure data source page.
Before you start
- Sign in to your account on 1Password.com and click Integrations in the sidebar.
- Set a name for the integration, such as SquaredUp.
- Enter a name for the 1Password events API key and choose when it will expire. Select the event types the token has access to, this should be both, then click Issue Token.
- Optionally, you can click Save in 1Password and choose which vault to save your token to. Then click View Integration Details.
Configuring the data source
Display Name:
Enter a name for your data source. This helps you to identify this data source in the list of your data sources.- 1Password Events API Key:
Enter your 1Password events API key for either Business or Enterprise. - Select 1Password server domain:
Select where your 1Password server is located. Available options are: .com, .ca, and .eu. - Business or Enterprise account:
Select whether you are configuring the data source for a Business or Enterprise account. Install Sample Dashboards:
Select whether you would like to install sample dashboards with the data source. By default, this is set to on.Restrict access to this data source:
You can enable this option if you only want certain users or groups to have access to the data source, or the permission to link it to new workspaces. See data source access control for more information.The term data source here really means data source instance. For example, a user may configure two instances of the AWS data source, one for their development environment and one for production. In that case, each data source instance has its own access control settings.
By default, Restrict access to this data source is set to off. The data source can be viewed, edited and administered by anyone. If you would like to control who has access to this data source, switch Restrict access to this data source to on.
Use the Restrict access to this data source dropdown to control who has access to the workspace:
- By default, the user setting the permissions for the data source will be given Full Control and the Everyone group will be given Link to workspace permissions.
- Tailor access to the data source, as required, by selecting individual users or user groups from the dropdown and giving them Link to workspace or Full Control permissions.
- If the user is not available from the dropdown, you are able to invite them to the data source by typing in their email address and then clicking Add. The new user will then receive an email inviting them to create an account on SquaredUp. Once the account has been created, they will gain access to the organization.
- At least one user or group must be given Full Control.
- Admin users can edit the configuration, modify the Access Control List (ACL) and delete the data source, regardless of the ACL chosen.
See Access control for more information.
Click Add.
You can also add a data source from Settings > Data Sources > Add data source, but sample dashboards are not added when using this method.
Next steps
Data streams
The following data streams are installed with this plugin.
Data streams standardize data from all the different shapes and formats your tools use into a straightforward tabular format.
While creating a tile you can tweak data streams by grouping or aggregating specific columns.
Depending on the kind of data, SquaredUp will automatically suggest how to visualize the result, for example as a table or line graph.
Data streams can be either global or scoped:
- Global data streams are unscoped and return information of a general nature (e.g. "Get the current number of unused hosts").
- A scoped data stream gets information relevant to the specific set objects supplied in the tile scope (e.g. "Get the current session count for these hosts").
See Data Streams for more information.
- Filter by the 1Password data source.
- Select All Failed Sign-ins from the data stream list and then click Next.
- Enter a Display Name for the new data stream.
- Optional, list top n:
Optionally, enter how many failed sign-in attempts to limit the list to, for example:10. - Optional, property to top n:
Optionally, select a property that you wish to filter top n results by. Available options are:category,country,type,user_name,client_app_name,client_ip,client_platform_name,client_os_name.
- Filter by the 1Password data source.
- Select All Item Usages from the data stream list and then click Next..
- Enter a Display Name for the new data stream.
- Optional, list top n:
Optionally, enter how many used items to limit the list to, for example:10. - Optional, property to top n:
Optionally, select a property that you wish to filter top n results by. Available options are:action,user_name,user_UUID,user_email,client_app_name,client_os_name,client_os_version,client_platform_name,client_ip.
- Filter by the 1Password data source.
- Select All Sign-ins from the data stream list and then click Next..
- Enter a Display Name for the new data stream.
- Optional, list top n:
Optionally, enter how many sign-in attempts to limit the list to, for example:10. - Optional property to top n:
Optionally, select a property that you wish to filter top n results by. Available options are:category,country,type,user_name,client_app_name,client_ip,client_platform_name,client_os_name.
- Filter by the 1Password data source.
- Select Graph Item Usages from the data stream list and then click Next..
- Enter a Display Name for the new data stream.
- Property to graph:
Select a property that you want to graph to, for example:action,user_name,user_UUID,user_email,client_app_name,client_os_name,client_os_version,client_platform_name,client_ip.
- Filter by the 1Password data source.
- Select Graph Sign-ins from the data stream list and then click Next.
- Enter a Display Name for the new data stream.
- Property to graph:
Select a property that you want to graph to, for example:category,country,type,user_name,client_app_name,client_ip,client_platform_name,client_os_name.
Data streams – dataSourceConfig Overrides
timeframe
You can override the provided timeframe enum when graphing by adding a timeframe to the dataSourceConfig to group by:
"Last1hour" for mins
"Last24hours" for hours
"Last7days" for days
"months" for months
“timeframe” : “Last24hours"filter
A filter can be added to bring back values that match the values of the property named in name:
"filter": [{
"name" : "category",
"value" : ["credentials_failed","mfa_failed","modern_version_failed","firewall_failed"]
}],This could be used to ensure only a specific users, actions or countries show up in the visualization.