EPM Knowledge
Alongside an account password, this unique key helps protect a 1Password account.
What is the Secret Key?
This feature fills saved usernames and passwords into websites.
What is autofill?
Before they became 1Password Device Trust and 1Password SaaS Manager, what were these two products called, in that order?
What are Kolide and Trelica?
An agency needs access to one client vault, but its staff shouldn’t become full members of the client’s 1Password account. What account type fits?
What is a guest account?
What does the P in MEDDPICC stand for?
What is Paper Process?
An employee can no longer sign in. In a Business account, this person can help recover their account.
Who is an administrator or owner?
This feature flags weak, reused, and compromised passwords.
What is Watchtower Report?
A customer wants device checks enforced during the SSO sign-in flow. Which Device Trust offering should you discuss?
What is Device Trust Connect?
IT knows which apps it assigns through Okta, but employees also sign up for tools on their own. Which product helps reveal those additional apps?
What is SaaS Manager?
A prospect isn’t evaluating another password manager. They might keep using their current spreadsheet instead. Which MEDDPICC element still needs attention?
What is Competition?
A customer asks which account region to choose before signing up. Name the three available regions.
What are the US, Canada, and EU?
This feature lets employees unlock 1Password through their identity provider.
What is Unlock with SSO?
What is the minimum number of users for a Device Trust opportunity?
What is 1 (or no minimum)?
A customer already uses Google as an identity provider for SSO. They want device security requirements enforced when employees sign in to protected apps. Which Device Trust offering fits that approach?
What is Device Trust Connect?
A prospect says any password manager they choose must support Entra SSO and their required data region. Which MEDDPICC element have they described?
What are Decision Criteria?
This integration method automates provisioning users from an identity provider into 1Password.
What is SCIM?
These automated sequences can grant app access during onboarding and revoke it during offboarding.
What are workflows?
IT knows which apps are assigned through Okta but suspects employees also sign up for tools on their own. Which product helps uncover those apps?
What is SaaS Manager?
A company discovers an important work login in an employee’s Employee vault. It wants the business to own the login and control access without waiting for that employee to leave. What capability fits?
What is Credential Governance?
What distinguishes a Champion from a contact who simply likes your product?
What is their ability and willingness to influence the decision internally?
“We’ve disabled a former employee in 1Password, so they can’t access any of our other company apps.” This is the assumption you should challenge.
What is that disabling 1Password does not, by itself, confirm their other app accounts were removed?
This 1Password feature helps IT and security teams find company logins in employee and shared vaults and take ownership of them.
What is Credential Governance?
An employee is removed from Okta, but their account in a work app remains active. They can still sign in directly from an unhealthy laptop. What are the two separate gaps, and which specific 1Password product addresses each?
What are app deprovisioning with SaaS Manager and device access enforcement with Device Trust Core?
A 100-person company finds company logins scattered across Employee vaults. It also needs to remove departing employees from their SaaS apps. Which capability handles the logins, and which product handles app offboarding?
What are Credential Governance and SaaS Manager?
What is the difference between Decision Process and Paper Process?
What is how the customer chooses a solution versus the steps from that decision to a signed agreement?