Vaultwarden 单点登录

用 Casdoor 配置 Vaultwarden

1. 1

   在 Casdoor 中注册 Vaultwarden

   在 Casdoor 控制台打开 应用，为 Vaultwarden 添加一个应用，在它的 OIDC/OAuth 标签页复制 客户端ID 和 客户端密钥。把下面的地址加到 重定向URLs：

   • https://vault.example.com/identity/connect/oidc-signin
2. 2

   Configure Vaultwarden

   Set these environment variables on Vaultwarden 1.35.0 or later, for example in Docker Compose, and restart it. Vaultwarden builds the redirect URI from DOMAIN.

   services:
     vaultwarden:
       image: vaultwarden/server:latest
       environment:
         DOMAIN: "https://vault.example.com"
         SSO_ENABLED: "true"
         SSO_AUTHORITY: "https://auth.example.com"
         SSO_CLIENT_ID: "<client ID>"
         SSO_CLIENT_SECRET: "<client secret>"
         SSO_SCOPES: "email profile"
         SSO_PKCE: "true"

3. 3

   Sign in

   Users can now choose single sign-on on the Vaultwarden login page, sign in at Casdoor, and then unlock their vault. Add SSO_ONLY: "true" once everyone has switched, to turn off email-and-password login.

Vaultwarden 的设置取自它的官方文档（核对于 2026年10月：Vaultwarden SSO wiki、Vaultwarden releases）；另见Casdoor 文档。Vaultwarden 是其所有者的商标。