Source

SSO, directory sync & provisioning — found from sitemap — Bitwarden

Checked for Bitwarden on 13 Oct 2026

Technical details

type: page
http status: 200
content hash: sha256:8a2ea67c97c07c96c87d740280cc6ddfe2be316129db32b7c0e68e6b09987af8
permission: robots_ok
screenshot: Screenshot on file (internal exhibit, not published)

Cited by

SSO zero knowledge Report an error

“Using SSO with Bitwarden retains our zero-knowledge encryption model. Nobody at Bitwarden has access to your data and, similarly, neither should your Identity Provider.”
SSO decryption master password Report an error

“Master password: Once authenticated, organization members will decrypt vault data using their master passwords.”
SSO decryption trusted devices Report an error

“Trusted devices: Allows users to authenticate with SSO and decrypt their vault using a device-stored encryption key, eliminating the need to enter a master password.”
SSO decryption key connector Report an error

“Key Connector: Connect to a self-hosted decryption key server.”
SSO authentication decryption decoupled Report an error

“That's why SSO decouples authentication and decryption. In all implementations, your Identity Provider cannot and will not have access to the decryption key needed to decrypt vault data.”
SSO jit provisioning Report an error

“Add Members with JIT”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.