1
0
mirror of https://github.com/bitwarden/help synced 2025-12-23 11:43:24 +00:00
Files
help/_articles/login-with-sso/using-sso.md
fred_the_tech_writer d6c98a6a57 09-15 (#738)
* Remove references to "Zero Trust" and downcase non-header instances of "zero knowledge"

* Morph "Link SSO" and "Access Vault using SSO" articles into a single "Using Login with SSO" one-stop-shop guide for end-users (i.e. non-configuration) + redirects + updated hyperlinks

* Update _articles/getting-started/getting-started-organizations.md

Co-authored-by: Trey Greer <61418192+tgreer-bw@users.noreply.github.com>

Co-authored-by: Trey Greer <61418192+tgreer-bw@users.noreply.github.com>
2021-09-15 13:41:17 -04:00

2.5 KiB

layout, title, categories, featured, popular, tags, order, redirect_from
layout title categories featured popular tags order redirect_from
article Using Login with SSO
login-with-sso
false false
sso
04
/article/link-to-sso/
/article/sso-access-your-vault/

As an end-user of Bitwarden, you will need to link your account to SSO and get your Organization identifier before you can login using SSO:

To link your account:

  1. Open the Web Vault, navigate to your Settings tab and open your Organizations.

  2. Hover over the desired Organization and select the {% icon fa-cog %} gear dropdown:

    {%image /sso/sso-link-button-overlay.png Link SSO Dropdown Option %}

  3. From the dropdown menu, select {% icon fa-link %} Link SSO.

Get your Organization Identifier

Every Bitwarden Organization has a unique identifier specifically for Login with SSO. You'll need this value to login, so ask your manager or Bitwarden administrator to retrieve it for you.

Login using SSO

To login to Bitwarden using SSO:

  1. Open your Bitwarden Web Vault or App and select the Enterprise Single Sign-On button:

    {% image sso/sso-button-lg.png Enterprise Single Sign-On button %}

  2. Enter your Organization Identifier and select Log In:

    {% image sso/org-id-input.png Organization Identifier field %}

    {% callout success %}We recommend bookmarking this page with your Organization Identifier included as a query string so that you don't have to enter it each time, for example https://vault.bitwarden.com/#/sso?identifier=YOUR-ORG-ID or https://your.domain.com/#/sso?identifier=YOUR-ORG-ID.{% endcallout %}

  3. Now that you've authenticated your identity using Login with SSO, enter your Master Password on the Login screen to decrypt your Vault.

{% callout success %} Why is my Master Password still required?

All Vault data, including credentials shared by your Organization, is kept by Bitwarden only in its encrypted form. This means that in order to use any of those credentials, you need a way to decrypt that data (we can't).

Your Master Password is the source of that decryption key. Even though you're authenticating (proving your identity) to Bitwarden using SSO, you still must use that decryption key (your Master Password) to see any meaningful data. {% endcallout %}