5 ms·
So what is the point of this, if the user still needs a master password?
by Valodim 1y ago
So what is the point of this, if the user still needs a master password?
- maxvisser 1y agoMaybe if you deactiveer a users entra id that he cant access its vaultwarden vault anymore.
- cephi 1y agoAccess control -- can make it easy to add/sync users in Authentik using one username
- esseph 1y agoCan you expand the question a bit?
- deleted 1y ago[deleted]
- franga2000 1y agoCreating, deleting, blocking accounts is the main one - you only do it once for a user and they get access to all your services. It also lets you do MFA and security checks on login (like on a new device) which can prevent break-ins even if your users use easily crackable passwords.
- ethan_smith 1y agoSSO handles authentication (proving who you are) while the master password is still needed for decryption (as the encryption key is derived from it).