Skip to main content

Bitwarden Integration

This guide will show you how to setup an integration with Bitwarden and Indent. Once complete, you can securely grant access to password vaults.

Through API magic, Indent securely grants access to just about any service. Bitwarden is a good integration if you want improve your org's security around password management.

What can I do with Bitwarden + Indent?​

  • Streamline onboarding new hires
  • Standardize permissions across roles
  • Holistically transfer permissions when an employee moves to a new role
  • Securely offboard users by instantly revoking access

Bitwarden is one of a few password managers integrated with Indent. Other password managers like 1Password are also available. If you'd like us to add another password manager send us a request.

Components​

note

This page assumes you completed the Indent Quickstart. (5 min setup)

Configuration​

This guide uses an identity provider (like Google or Okta) to connect with Bitwarden Business. Indent is used to grant temporary (or permanent) access to those groups, and automatically collects evidence your org needs for audits and compliance.

A GitHub Actions and Terraform repo will be used to deploy an Okta + Indent. The integration between Okta and Bitwarden will then grant access to password vaults to anyone who's part of a related Okta Group. S3 will be used to store Terraform state, and AWS Lambda will run the webhook.

1. Setup your Identity Provider​

  • Open the Indent + Okta docs
  • Follow the Configuration instructions
  • Test your integration with the Using Indent + Okta Groups instructions

2. Follow the SCIM Bridge Guide​

3. Assign Groups​

Follow Bitwarden's guide for assigning Groups to collections using your Bitwarden dashboard.

Interactive Demo​

In the following example, you're logged in as Fouad and can request access to an Okta Group. In real usage, you would want an Okta Group linked with a Bitwarden collection. Requesting access to the Okta Group through Indent gives you the ability to grant secure, on-demand, and auto-expiring access to vaults with sensitive passwords. Indent can also be used for new employees to self-serve requests for permanent access during onboarding.

Try submitting and approving a request:

Summary​

Congrats! You added the Bitwarden + Indent integration. Your employees can now securely request access to credentials. Indent will automatically record an audit log, and auto-expire access after a time period of your choosing.

Next, check out the Integrations page page for other services your teams want to request. If there's a new integration you'd like to see, request a new one. You might be ready to start inviting others to try Indent. If that's the case, you'll want to send them docs on how to make a request. You and anyone approving requests should read more about approving and declining requests.

Questions​

Why can't I see my Groups in Indent?

You might need to sync Okta Groups or Google Workspaces with Indent. Try visiting the Resources section in your Indent dashboard, and clicking Pull Updates.

Why can't I see my Groups in Bitwarden?

If you are unable to find your Okta Groups in your Bitwarden dashboard, you may need open Okta Admin and click the Push Groups button on the their integration.

Can Indent host the integration for me?

Sure! We can host the integration on an single-tenant AWS account. That's a popular way to do an initial setup while your teams test out Indent. To start that process, contact Indent Support

How do I ask for help?

If you have questions or need help with your integration, try chatting with Indent Support.

  • © Indent Inc

  • Built in California.
  • All rights reserved.

Product

Support

Company

Social