News for hackers. Stuff that matters.
Re:Ask HN: What's the best corporate password manager? by ncallaway on Tuesday March 10, 2020 @09:44AM (#22535365)
I can't answer your question directly, since we only have 4 people at our company, so not really enterprise scale...

But they did recently introduce a CLI here: https://support.1password.com/command-line-getting-started/#...

That makes me optimistic that you could at least do a fair amount of automation around it. I haven't used it myself yet, so I'm not sure how fully featured the cli is

Re:Ask HN: What's the best corporate password manager? by dickeytk on Tuesday March 10, 2020 @09:48AM (#22535405)
While 1Password is fantastic, their CLI is the worst CLI I’ve ever seen. Basically unusable.

You should just be able to say “give me the password for yahoo.com” but you can’t actually do that.

I wanted to use it to get npm 2FA on the command line and just gave up completely.

EDIT: if someone from 1Password reads this, please reach out. I have good CLI UX experience and would love to help fix it.

Re:Ask HN: What's the best corporate password manager? by cohix on Tuesday March 10, 2020 @04:51PM (#22539559)
Disclosure: I am the lead developer for the team that builds the 1Password CLI.

You're completely right about the use-case there. One of the things I think we missed the mark on was choosing to expose the full item JSON structure as the default. I think it is important that access to the full item is available, but I think it would have been a much better user experience if we had abstracted that in the default case.

What you've pointed out here is what we are currently working on addressing. Development of the CLI was put on hold for over a year while development of our SCIM bridge was ongoing (they're built on the same codebase). In the past few months, we have ramped up the entire team, and movement has accelerated greatly on the CLI. This is feedback we're well aware of, and we're working hard to address it.

Feel free to post in our discussion forums if you're still willing to have a more extensive conversation: https://discussions.agilebits.com.

Re:Ask HN: What's the best corporate password manager? by dickeytk on Tuesday March 10, 2020 @05:59PM (#22540245)
Really happy to hear you are working on it. FWIW your products are so fantastic I'm definitely more critical than I would be if that wasn't the case. I hold 1Password to a super high standard.

I'll give it a spin again too as it's been a while since I tried it last and check out the forums!

Re:Ask HN: What's the best corporate password manager? by cohix on Tuesday March 10, 2020 @07:13PM (#22540999)
Thanks very much, and I hope within the next 2-3 months we'll be in a place where you can hold the CLI to those standards as well :)
Re:Ask HN: What's the best corporate password manager? by atomize on Wednesday March 11, 2020 @01:32PM (#22547865)
Wow you handled that awkwardly critical comment like a champ! Haha. Cheers.
Re:Ask HN: What's the best corporate password manager? by dharmab on Tuesday March 10, 2020 @11:37AM (#22536339)
I think it's a consequence of their internal data type not being specific to passwords. You can store some semi-freeform data structures in 1Password's database (e.g. notes, documents, account numbers, security questions, even binary files).
Re:Ask HN: What's the best corporate password manager? by dickeytk on Tuesday March 10, 2020 @11:59AM (#22536566)
You can totally design a CLI around that kind of data model without resorting to jq
Re:Ask HN: What's the best corporate password manager? by ncallaway on Tuesday March 10, 2020 @10:10AM (#22535556)
Super disappointing to hear :/
Re:Ask HN: What's the best corporate password manager? by dickeytk on Tuesday March 10, 2020 @06:27PM (#22540522)
On the plus side, they did get a bunch of funding recently so hopefully they'll be able to devote some resources to it. They definitely seem like an organization that is pretty devoted to quality products.