Using Login with SSO

As an end-user of Bitwarden, you will need to have your Organization identifier before you can login using SSO:

Get your Organization Identifier

Every Bitwarden Organization has a unique identifier specifically for Login with SSO. You'll need this value to login, so ask your manager or Bitwarden administrator to retrieve it for you.

Login using SSO

The steps required to login using SSO will be slightly different depending on whether your Organization is using Key Connector or not:

Login with SSO & Master Password

To login using SSO and your Master Password:

1. Open your Bitwarden Web Vault and select the Enterprise Single Sign-On button:

   

2. Enter your Organization Identifier and select Log In:

   

   tip

   We recommend bookmarking this page with your Organization Identifier included as a query string so that you don't have to enter it each time, for example https://vault.bitwarden.com/#/sso?identifier=YOUR-ORG-ID or https://your.domain.com/#/sso?identifier=YOUR-ORG-ID.

3. Now that you've authenticated your identity using SSO, you'll be prompted to either create a Master Password for your new account or, if you already have a Bitwarden account, to enter your Master Password to decrypt your Vault.

   note

   Why is my Master Password still required?

   All Vault data, including credentials shared by your Organization, is kept by Bitwarden only in its encrypted form. This means that in order to use any of those credentials, you need a way to decrypt that data. We can't.

   Your Master Password is the source of that decryption key. Even though you're authenticating (proving your identity) to Bitwarden using SSO, you still need to use a decryption key (your Master Password) to unscramble Vault data.

4. If you're using two-step login, authenticate using your secondary device.

   warning

   Two-step login via email is not recommended if you're using Login with SSO as using multiple methods will cause errors. Consider setting up two-step login via a free authenticator instead.

Login with SSO & Key Connector

To login using SSO and Key Connector:

1. Open your Bitwarden Web Vault and select the Enterprise Single Sign-On button:

   

2. Enter your Organization Identifier and select Log In:

   

   tip

   We recommend bookmarking this page with your Organization Identifier includes as a query string so that you don't have to enter it each time, for example https://vault.bitwarden.com/#/sso?identifier=YOUR-ORG-ID or https://your.domain.com/#/sso?identifier=YOUR-ORG-ID.

3. Depending on your account status, you might be required to enter or create a Master Password the first time you login with SSO and Key Connector. Doing so will remove the Master Password from your account.

   tip

   We encourage you to read this and this to fully understand what it means to remove a Master Password from your account. You can instead elect to Leave the Organization instead, however this will remove access to both Organization-owned Vault items and Collections and to Single Sign-On.

4. If you're using two-step login, authenticate using your secondary device.

   warning

   Two-step login via email is not recommended if you're using Login with SSO as using multiple methods will cause errors. Consider setting up two-step login via a free authenticator instead.

Link your Account

You should only need to link your account to SSO if you already have a Bitwarden account that's a member of the Organization or if your Organization does not require you to use SSO:

1. Open the Web Vault, navigate to your Settings tab and open your Organizations.

2. Hover over the desired Organization and select the  gear dropdown:

   

   From the dropdown menu, select  Link SSO.

Once linked, you should be able to login using SSO as documented above.