@@ -66,6 +66,7 @@ configuration options:
66
66
67
67
* ` email ` : The email address to use as the account name when logging into the
68
68
Bitwarden server. Required.
69
+ * ` client_id ` : Client ID part of the API key. Defaults to regular login process if unset.
69
70
* ` sso_id ` : The SSO organization ID. Defaults to regular login process if unset.
70
71
* ` base_url ` : The URL of the Bitwarden server to use. Defaults to the official
71
72
server at ` https://api.bitwarden.com/ ` if unset.
@@ -95,6 +96,18 @@ between by using the `RBW_PROFILE` environment variable. Setting it to a name
95
96
switch between several different vaults - each will use its own separate
96
97
configuration, local vault, and agent.
97
98
99
+ ### Auth methods
100
+
101
+ Currently ` rbw ` supports three login strategies, listed by order of priority:
102
+ 1 . ` apikey ` , requires you to provide ` client_id ` and ` client_secret ` . Will be enabled
103
+ when a ` client_id ` value is set in the config file
104
+ 2 . ` SSO ` (Enterprise Single Sign-On). Will be enabled when a ` sso_id ` value is set in
105
+ the config file. (Note: due to the current implementation, if your account is secured with 2FA
106
+ you'll be required to go through the browser flow twice. You'll be prompted for the 2FA code
107
+ after the first run)
108
+ 3 . ` email&password ` , regular auth method, uses the same credentials as Bitwarden's Web Vault.
109
+ That's most likely what you want to use
110
+
98
111
## Usage
99
112
100
113
Commands can generally be used directly, and will handle logging in or
0 commit comments