Connect Bitwarden with OAuth 2.0 - Client Credentials – StackOne Hub

Link a Bitwarden account in the StackOne Hub using OAuth 2.0 - Client Credentials. End-user guide to authorize the integration and start using Bitwarden actions.

Public API access is available only to Bitwarden Teams and Enterprise organizations. You must be a Bitwarden organization Owner to view or rotate the organization API key.

Choose your region

Bitwarden offers hosted servers in two regions and supports self-hosted deployments. Enter the API Base URL and Identity Base URL fields with the values that match the region where your organization lives — both must point to the same region.

• United States — API: https://api.bitwarden.com, Identity: https://identity.bitwarden.com
• European Union — API: https://api.bitwarden.eu, Identity: https://identity.bitwarden.eu
• Self-hosted — API: https://<your-host>/api, Identity: https://<your-host>/identity

Retrieve the organization API key

Sign in to the Bitwarden web vault as an Owner of the organization and copy the API key.

1. Open the Admin Console

   Sign in to your Bitwarden web vault (or the EU / self-hosted equivalent) and switch from Password Manager to Admin Console using the product switcher in the top navigation.

2. Open Organization info

   In the left sidebar choose Settings > Organization info.

3. View the API key

   Scroll to the API key section at the bottom of the page and click View API key. Confirm your master password if prompted.

   • Copy the client_id value (it has the form organization.<org-uuid>).
   • Copy the client_secret value. Treat it as a password.
   • If the API key was leaked, click Rotate API key to invalidate the old credentials and generate new ones.

Linking the Account from the Hub

1. Navigate to the Hub

   Use one of the three Linking Account Methods to access the Hub.

2. Fill out the fields

   Fill out the following fields using details from your provider:

   • API Base URL
   • Identity Base URL
   • Client ID
   • Client Secret
3. Connect

   • Click Connect
   • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
   • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account in your Accounts page.