github-starred/vaultwarden
2
0
Fork 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-07-15 18:12:14 -05:00
Code Issues 479 Packages Projects Releases 83 Wiki Activity

[GH-ISSUE #6762] Forced SSO - cannot get plugins/desktop or mobile APP to login #15321

New Issue
Closed
opened 2026-04-23 07:12:08 -05:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-04-23 07:12:08 -05:00
Owner
Copy Link

Originally created by @dwtypeofcode on GitHub (Jan 27, 2026).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/6762

Prerequisites

Vaultwarden Support String

I've configured SSO with EntraID with the manual: https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect

I've enabled SSO in docker compose file, I've also enabled SSO_ONLY: true

Now when I try to login to any account via web browser plugin OR bitwarden desktop app OR android bitwarden app I'm getting error like SSO sign-in required - when typing login - it doesn't redirect me to the O365 login page.

When I disable SSO_ONLY: true - it'll work without any problem, but there's another "issue". When you block some account on the EntraID - then user IS STILL ABLE to login via his master password.

Vaultwarden Build Version

1.35.2

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

nginx 1.22.1

Host/Server Operating System

Linux

Operating System Version

Debian

Clients

Browser Extension

Client Version

No response

Steps To Reproduce

  1. Set SSO_ONLY: true in docker compose
  2. Deploy docker container
  3. Try to login via browser extension / desktop app / android app.

Expected Result

To be able to login via forced SSO on mobile / desktop app and browser plugin

Actual Result

Image SSO sign-in is required

Logs

Screenshots or Videos

No response

Additional Context

No response

Originally created by @dwtypeofcode on GitHub (Jan 27, 2026). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/6762 ### Prerequisites - [x] I have searched the existing **Closed _AND_ Open** [Issues](https://github.com/dani-garcia/vaultwarden/issues?q=is%3Aissue%20) **_AND_** [Discussions](https://github.com/dani-garcia/vaultwarden/discussions?discussions_q=) - [x] I have searched and read the [documentation](https://github.com/dani-garcia/vaultwarden/wiki/) ### Vaultwarden Support String I've configured SSO with EntraID with the manual: https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect I've enabled SSO in docker compose file, I've also enabled SSO_ONLY: true Now when I try to login to any account via web browser plugin **OR** bitwarden desktop app **OR** android bitwarden app I'm getting error like SSO sign-in required - when typing login - it doesn't redirect me to the O365 login page. When I disable **SSO_ONLY: true** - it'll work without any problem, but there's another "issue". When you block some account on the EntraID - then user IS STILL ABLE to login via his master password. ### Vaultwarden Build Version 1.35.2 ### Deployment method Official Container Image ### Custom deployment method _No response_ ### Reverse Proxy nginx 1.22.1 ### Host/Server Operating System Linux ### Operating System Version Debian ### Clients Browser Extension ### Client Version _No response_ ### Steps To Reproduce 1. Set SSO_ONLY: true in docker compose 2. Deploy docker container 3. Try to login via browser extension / desktop app / android app. ### Expected Result To be able to login via forced SSO on mobile / desktop app and browser plugin ### Actual Result <img width="350" height="70" alt="Image" src="https://github.com/user-attachments/assets/61fbf6ea-eb97-458a-a7de-02a26c490737" /> SSO sign-in is required ### Logs ```text ``` ### Screenshots or Videos _No response_ ### Additional Context _No response_
GiteaMirror added the bug label 2026-04-23 07:12:08 -05:00
GiteaMirror commented 2026-04-23 07:12:11 -05:00
Author
Owner
Copy Link

@mvalois commented on GitHub (Jan 28, 2026):

You need to click on "Use single sign-on" instead of "continue" : https://bitwarden.com/help/using-sso/

<!-- gh-comment-id:3812202259 --> @mvalois commented on GitHub (Jan 28, 2026): You need to click on "Use single sign-on" instead of "continue" : https://bitwarden.com/help/using-sso/
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
better for forum
bug
documentation
duplicate
enhancement
future Vault
good first issue
help wanted
low priority
notes
pull-request
Mirrored from GitHub Pull Request
 question
SSO
Third party
troubleshooting
wontfix
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#15321
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?