About Directory Connector

The Bitwarden Directory Connector app automatically provisions users, groups, and group associations in your Bitwarden organization by pulling from a selection of source directory services. Provisioned users will be issued invitations to join the organization, and can subsequently complete the normal onboarding procedure.

Directory Connector can be configured to remove users from your Bitwarden organization when they are disabled from the source directory. This won't delete their Bitwarden accounts, but they will lose all access to your organization.

A Directory Connector sync operation can be run on-demand or automatically on a configured interval. Directory Connector applications can be installed as an agent on the server that hosts your directory, an administrator's workstation, or any other desktop device that can access the source directory.

Directory Connector supports sync from the following sources:

• Active Directory

• Any LDAP-based directory

• Microsoft Entra ID

• Google Workspace

• Okta

• OneLogin

Directory Connector is available as a cross-platform desktop app and as a command line interface (CLI). The desktop app and CLI share a database and configurations, so simultaneous use on a single machine is not recommended. The recommended path is to complete configuration and testing using the desktop app, and subsequently using the CLI to schedule automatic syncing to your production organization.

Use the following links to download Directory Connector:

As with everything at Bitwarden, Directory Connector is open source and hosted on GitHub at github.com/bitwarden/directory-connector.