Admin ConsoleUser Management

About Directory Connector

The Bitwarden Directory Connector app automatically provisions users, groups, and group associations in your Bitwarden organization by pulling from a selection of source directory services. Provisioned users will be issued invitations to join the organization, and can subsequently complete the normal onboarding procedure.

Directory Connector can be configured to remove users from your Bitwarden organization when they are disabled from the source directory. This won't delete their Bitwarden accounts, but they will lose all access to your organization.


Directory Connector functionality is available to Teams and Enterprise organizations. To use Directory Connector, you must have access to your organization API key which can only be retrieved by an organization owner and securely shared using Bitwarden Send.

Directory Connector Diagram
Directory Connector Diagram

A Directory Connector sync operation can be run on-demand or automatically on a configured interval. Directory Connector applications can be installed as an agent on the server that hosts your directory, an administrator's workstation, or any other desktop device that can access the source directory.

Directory Connector supports sync from the following sources:

Directory Connector applications

Directory Connector is available as a cross-platform desktop app and as a command line interface (CLI). The desktop app and CLI share a database and configurations, so simultaneous use on a single machine is not recommended. The recommended path is to complete configuration and testing using the desktop app, and subsequently using the CLI to schedule automatic syncing to your production organization.

Directory Connector Desktop App
Directory Connector Desktop App

Do not use this option for offboarding users, this should be accomplished in one of the following ways:

  • Activating the Remove disabled users during sync option.

  • Manually removing users from the web vault.

In either case, consider using admin password reset to takeover and audit removed users' vaults before removing them from the organization, and and using one of these methods to delete their accounts after removed.

Additionally, Directory Connector will not delete or remove groups.

Download Directory Connector

Use the following links to download Directory Connector:

Download the latest version of the Directory Connector desktop app from our GitHub releases page or by using one of the following official links:

Download the latest version of the Directory Connector CLI from one of the following links:

Source code

As with everything at Bitwarden, Directory Connector is open source and hosted on GitHub at

Make a suggestion to this page

Contact Our Support Team

For technical, billing, and product questions.

Bitwarden account email*
Verify account email*
Are you self-hosting?*

Cloud Status

Check status

© 2024 Bitwarden, Inc.TermsPrivacySitemap
This site is available in English.
Go to EnglishStay Here