Welcome to Vaultwarden

The SilverWulf team password manager. This guide walks you through getting set up and signing in with single sign-on (SSO) โ€” step by step. Any trouble, ping Lance.

The 30-second version

Vaultwarden is where we store passwords securely. You sign in through Authentik, our single sign-on system โ€” the same login you'll use across company tools. One account, one login, everything in one place.

Getting set up

1

Get your Authentik account Lance sets this up

Lance creates your Authentik account using your work email and adds you to the "Vault Users" group (that group grants access to the vault SSO app). You'll receive either an enrollment invite or a temporary password.

Authentik is the "front door" โ€” it proves who you are before letting you into the vault.

2

Set your Authentik password & MFA

Go to auth.silverwulf.com, log in with the credentials you were given, set a strong password, and enroll a second factor (authenticator app) if prompted.

Tip: Use a long, unique password here. This single login protects everything, so make it a good one.
3

Create your vault & master password

Go to vault.silverwulf.com and create your Vaultwarden account using the same work email as your Authentik account. Self-signup is disabled โ€” use the invitation email from SilverWulf Vault (Lance sends it).

Important โ€” use the same email: SSO links your login to your vault by matching your email. Same email in both = everything connects automatically.

Your master password unlocks and decrypts your vault. Keep it safe โ€” not even Lance can recover it for you (that's by design).

4

Sign in with SSO

On the Vaultwarden login page, click "Enterprise single sign-on." Enter the company SSO identifier if asked, then you'll be sent to Authentik to log in. After that, you land back in your vault โ€” signed in.

That's it. From now on, "Enterprise single sign-on" is your normal way in.
5

Install the browser extension & app

Add the Bitwarden extension to your browser and the app on your phone. When it asks for a server, choose self-hosted and enter vault.silverwulf.com. Then log in the same way.

Quick answers

Do I still need my master password if I use SSO?

Yes. SSO proves who you are; your master password unlocks the actual vault contents. You may be asked for it after signing in.

What if Authentik is ever down (or I'm remote without the VPN)?

You can still log in to Vaultwarden directly with your email and master password. Both methods stay available. Note: the Authentik login page only works from the office network or Tailscale VPN โ€” when you're remote without Tailscale, skip the SSO button and use email + master password.

I forgot my master password.

It can't be recovered โ€” that's by design, for security. Contact Lance to discuss account recovery options.

Who do I contact for help?

Reach out to Lance for account access, invites, or login trouble.