bitwarden/help
1
0
Fork 0
mirror of https://github.com/bitwarden/help synced 2025-12-18 09:13:20 +00:00
Code Issues Releases Wiki Activity

Sso faq (#204)

Browse Source 
* added standalone SSO FAQ page

* added SAML field reference
This commit is contained in:
Trey Greer
2020-09-21 13:51:52 -04:00
committed by GitHub
parent 47f64a02e1
commit 00c0f4d270
3 changed files with 179 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
_articles/login-with-sso/getting-started-with-sso.md
View File

@@ -124,30 +124,4 @@ To do this, the user will need to log into their Web Vault using their `email` a
## FAQs
**Q: What Plans offer Login with SSO?**
**A:** Current Enterprise plans offer this feature. To upgrade from a Classic Enterprise plan to a current Enterprise offering, please [contact us](https://bitwarden.com/contact)
**Q: Does SSO Replace my Master Password and Email?**
**A:** No, SSO is meant to be an easier way for Organizations to maintain control of Organization users, allow just-in-time new user provisioning, centralized MFA, and in the near future, improved employee succession management.
Logging in with SSO will authenticate your Bitwarden session and allow you to use an existing IdP session if it exists, and leverage any currently implemented MFA rules as well.
Once logged in, after providing (or creating) your Master Password will perform the encryption/decryption of your Vault data, just as it always has, keeping the audited Bitwarden security model intact.
**Q: Will changing my SSO password affect my Master Password?**
**A:** No, your Master Password will remain the same and will still be used to decrypt your Vault data. You can change your Master Password in the Web Vault.
**Q: Can I still log in with my Master Password if my Organization has SSO enabled?**
**A:** Currently, yes. In the near future we will be enabling Enterprise Policies to allow Organizations to control authentication mechanisms for their users.
**Q: Will this work with a self-hosted instance of Bitwarden?**
**A:** Yes! It will work with self-hosted regardless of whether it is on-premise or in your own cloud, as long as your Identity server is reachable from the Bitwarden instance.
**Q: Do I still need to use Bitwarden Directory Connector?**
**A:** If you manually manage your Bitwarden Group and Collection assignments, there is no need to leverage the Directory Connector. However, if you would like to have Groups and users automatically synchronized, we recommended leveraging Login with SSO with Directory Connector for the most complete solution.
Please visit our [Login with SSO FAQs](/article/sso-faqs/) for more information.