Enterprise Reference Guide to Bitwarden Authentication
Outlining critical capabilities around Bitwarden authentication and SSO offerings
- Recursos
- Enterprise Reference Guide to Bitwarden Authentication
Authentication type | What is it? | Deployment considerations |
---|---|---|
SSO with trusted devices | For a passwordess experience, employees use their SSO credentials to authenticate and decrypt in a single step. Registered, trusted devices are able to decrypt vaults and confirm and accept new devices. Once a device is trusted it does not need approval again. | Selecting this option will allow employees to log in and decrypt their vaults without needing a password. Trusted devices are registered and can confirm logins and extend trust to other devices.
Additional trusted devices can be registered with approval from the Bitwarden desktop app, mobile app, or by a Bitwarden administrator. Each trusted device has an individual device encryption key, and zero-knowledge, end-to-end encryption and security is maintained across devices. Additional resources: Set up SSO with trusted devices Enterprise passwordless SSO brings better productivity and user sign in experience for employees |
Login with SSO | User authentication is separated from vault decryption by leveraging your company’s identity provider to authenticate users into their Bitwarden vault and using master passwords for decryption of vault data. | This option supports identity providers using SAML 2.0 or OpenID Connect standards. Selecting this option means that anytime an employee logs into Bitwarden using SSO, they’ll need to use their master password to decrypt their vault, protecting your businesses’ critical credentials and secrets.
|
Login with SSO and customer-managed encryption | Employees use their SSO credentials to authenticate and decrypt all in a single step. This option shifts retention of the users master passwords to companies requiring the business to deploy a key connector to store the user keys. | For companies with widely adopted SSO implementations, and the desire to integrate authentication and decryption in an on-premises solution, Bitwarden offers SSO with customer-managed encryption. In this scenario, companies manage a key connector agent. This requires a connection to a database that stores encrypted user keys, and an RSA key pair to encrypt and decrypt those keys. This approach maintains a zero knowledge encryption architecture because no decryption keys pass through Bitwarden servers at any point. Management of cryptographic keys is incredibly sensitive and is only recommended for enterprises with a team and utilizing infrastructure that has already securely deployed and managed a key server. SSO with customer-managed encryption is available for customers self-hosting Bitwarden.
|
Login with Bitwarden | Employees use their email and master password to login and decrypt their Bitwarden vault. | For companies that want to get started quickly, login with Bitwarden allows employees to use their unique email and master password to access their vault. It is perfect for companies that do not yet centrally manage authentication or use an identity profiver. Administrators can manually invite employees into Organizations and shared Collections, or use the Bitwarden Directory Connector to synchronize LDAP groups |
Login with device | Employees use their email to login and then confirm the login from a second, authenticated device (mobile app or desktop app) that securely shares the vault encryption key on approval. | Login with device is an available option to all employees after they have logged in with email and master password at least once on the device. This allows employees to quickly log back in to all of their Bitwarden clients after first logging into their mobile or desktop app. Additional resources: |
Elija el plan que se adapte a sus necesidades
Gratis
$0
al mes
Gratis para siempre
Obtenga un almacén Bitwarden
- Dispositivos ilimitados
- Gestión de claves de acceso
- Todas las funciones básicas
- Siempre gratis
Compartir elementos del almacén con otro usuario
Premium
Less than$1
al mes
$10 facturados anualmente
Disfrute de funcionalidades premium
- Autenticador Bitwarden
- Archivos adjuntos
- Acceso de emergencia
- Informes de seguridad y mucho más
Compartir elementos del almacén con otro usuario
Familias
$3.33
al mes
Hasta 6 usuarios, $40 facturados anualmente
Proteja los datos de login de su familia
- 6 cuentas premium
- Compartir sin límites
- Colectas ilimitadas
- Organización del almacenamiento
Compartir los elementos del almacén entre seis personas
Precios en USD y basados en una suscripción anual
Equipos
Protección resistente para equipos en crecimiento
$4
por mes/por usuario facturado anualmente
Comparta datos sensibles de manera segura con compañeros de trabajo, entre departamentos o con toda la empresa.
- Intercambio seguro de datos
- Supervisión del registro de sucesos
- Integración de directorios
Incluye funcionalidades premium para todos los usuarios
Empresa
Funciones avanzadas para grandes organizaciones
$6
por mes/por usuario facturado anualmente
Utilice funcionalidades avanzadas como las políticas de empresa, el SSO sin contraseña y la recuperación de cuentas.
- Políticas empresariales
- SSO sin contraseña
- Recuperación de cuentas
Incluye funcionalidades premium y un plan familiar gratuito para todos los usuarios
Solicitar presupuesto
Para empresas con cientos o miles de empleados, póngase en contacto con ventas para obtener un presupuesto personalizado y ver cómo Bitwarden puede:
- Reducir el riesgo de ciberseguridad
- Aumentar la productividad
- Integrarse perfectamente
Bitwarden se adapta a empresas de cualquier tamaño para garantizar la seguridad de las contraseñas en su organización.
Precios en USD y basados en una suscripción anual