LDAPS support about directory-connector HOT 6 CLOSED

@scifire91 The directory sync tool cannot share the LDAP credentials. Bitwarden works much differently than traditional web applications that only use the username/passwords for authentication. Bitwarden uses the user's password for authentication as well as the encryption key for all of their protected vault data. Because of this, a user must always enter the a bitwarden master password to unlock their vault's data. Unfortunately this type of secure design does not permit you to sync or share passwords with other systems, like LDAP credentials. Our directory sync tool is primarily used as a means for onboarding/offboarding of users within your organization's directory and controlling user access within the organization with groups.

from directory-connector.

I just realized that the passwords are not checked against AD for imported users, is that correct? Each user has to set their own master password upon invitation, which is used to encrypt the data in the personal vault?

from directory-connector.

@kspearrin can you confirm that users need to create their own password for bitwarden and can not use AD(synced) password?
Didn´t find anything about that on the help page

from directory-connector.

LDAPS is now supported in the newest version (complete re-write of the application to a GUI).

from directory-connector.

Thanks for that very detailed answer :) thought that this will not work by design but wanted it to confirmed

from directory-connector.

Indeed, much appreciated!

from directory-connector.