Select the Allow SSO authentication check box.Select Organizations > Settings > Single sign-On.The AuthPoint metadata provides your resource, in this case Bitwarden, with information necessary to identify AuthPoint as a trusted identity provider. If you do not have a certificate, or if all of your certificates have expired, click Add Certificate and use the newly created certificate. We recommend that you choose the certificate with the latest expiration date. Next to the AuthPoint certificate you will associate with your resource, click and select Download Metadata and Download Certificate.If you have a Service Provider account, you must select an account from Account Manager. From the navigation menu, select Configure > AuthPoint.

After you have that, you can configure Bitwarden. from the Certificate Management page in the AuthPoint management UI. To start, you must download the metadata file The metadata provides your resource with information necessary to identify AuthPoint as a trusted identity provider. An AuthPoint user has been created with the activated token in WatchGuard Cloud (the AuthPoint and Bitwarden user accounts must have the same email address).You have an AuthPoint identity provider (IdP) certificate An AuthPoint IdP certificate is required for SAML authentication.A user can log in to the Bitwarden portal and the user has permission to configure Single Sign-On.This diagram shows the data flow of an MFA transaction for Bitwarden.īefore you begin these procedures, make sure that: Bitwarden Authentication Data Flow with AuthPointĪuthPoint communicates with various cloud-based services and service providers with the SAML protocol. This document describes how to set up multi-factor authentication (MFA) for Bitwarden with AuthPoint, and configure SAML authentication with AuthPoint as an identity provider. Bitwarden Integration with AuthPoint Deployment Overview

Bitwarden vault location