About Directory Connector

The Bitwarden Directory Connector app automatically provisions users, groups, and group associations in your Bitwarden organization by pulling from a selection of source directory services. Provisioned users will be issued invitations to join the organization, and can subsequently complete the normal

.

Directory Connector can be configured to remove users from your Bitwarden organization when they are disabled from the source directory. This won't delete their Bitwarden accounts, but they will lose all access to your organization.



note

Directory Connector functionality is available to Teams and Enterprise organizations. To use Directory Connector, you must have access to your

organization API key

which can only be retrieved by an

organization owner

and securely shared using

Bitwarden Send

.

A Directory Connector sync operation can be run on-demand or automatically on a configured interval. Directory Connector applications can be installed as an agent on the server that hosts your directory, an administrator's workstation, or any other desktop device that can access the source directory.

Directory Connector supports sync from the following sources:

• Active Directory

• Any LDAP-based directory

• Microsoft Entra ID

• Google Workspace

• Okta

• OneLogin

Directory Connector is available as a cross-platform

and as a

command line interface (CLI)

. The desktop app and CLI

share a database and configurations

, so simultaneous use on a single machine is not recommended. The recommended path is to complete configuration and testing using the

desktop app

, and subsequently using the

CLI

to

schedule automatic syncing

to your production organization.

Use the following links to download Directory Connector:

As with everything at Bitwarden, Directory Connector is open source and hosted on GitHub at

.