n8n-nodes-bitwarden

[Velocity BPA Licensing Notice]

This n8n node is licensed under the Business Source License 1.1 (BSL 1.1).

Use of this node by for-profit organizations in production environments requires a commercial license from Velocity BPA.

For licensing information, visit https://velobpa.com/licensing or contact licensing@velobpa.com.

A comprehensive n8n community node for Bitwarden, the open-source password manager and secrets management platform. This node enables workflow automation for organization management, member provisioning, collection administration, SSO configuration, directory sync, and Secrets Manager integration through Bitwarden's Public API.

Features

• Member Management: Invite, confirm, update, revoke, and restore organization members with collection and group access control
• Collection Administration: Create, update, delete collections with granular member and group access permissions
• Group Management: Organize members into groups with bulk operations and collection access configuration
• Policy Configuration: Configure organization security policies including 2FA, master password requirements, SSO, and vault timeout
• Event Monitoring: Query and filter organization audit events by date range, member, or event type
• Organization Settings: Manage organization details, billing, subscription, and API keys
• SSO Configuration: Configure OpenID Connect and SAML 2.0 single sign-on with Key Connector support
• Directory Sync: Configure and trigger directory synchronization with Azure AD, Okta, OneLogin, GSuite, and more
• Secrets Manager: Manage secrets, projects, and service accounts for DevOps credential management
• Import/Export: Bulk import and export organization vault data and member lists
• Multi-Environment Support: Works with Bitwarden Cloud (US/EU) and self-hosted instances
• Trigger Node: Poll for organization events with configurable event type filtering

Installation

Community Nodes (Recommended)

1. Open n8n
2. Go to Settings > Community Nodes
3. Select Install
4. Enter n8n-nodes-bitwarden in the input field
5. Click Install

Manual Installation

# Navigate to your n8n installation directory
cd ~/.n8n

# Install the package
npm install n8n-nodes-bitwarden

Development Installation

# Clone the repository
git clone https://github.com/Velocity-BPA/n8n-nodes-bitwarden.git
cd n8n-nodes-bitwarden

# Install dependencies
npm install

# Build the project
npm run build

# Create symlink to n8n custom nodes directory
mkdir -p ~/.n8n/custom
ln -s $(pwd) ~/.n8n/custom/n8n-nodes-bitwarden

# Restart n8n

Credentials Setup

Bitwarden API Credentials

Obtaining API Credentials

1. Log into the Bitwarden Web Vault as an organization owner
2. Navigate to Admin Console > Settings > Organization info
3. Scroll to the API Key section
4. Click View API Key or Rotate API Key
5. Copy the client_id and client_secret values

Note: The client_id format is organization.{uuid}

Resources & Operations

Members

Collections

Groups

Policies

Supported Policy Types: Two-Factor Authentication, Master Password, Password Generator, Single Organization, Require SSO, Personal Ownership, Disable Send, Send Options, Reset Password, Maximum Vault Timeout, Disable Personal Vault Export, Activate Autofill

Events

Organization

SSO Configuration

Supported SSO Types: OpenID Connect, SAML 2.0

Directory Sync

Supported Directory Types: Azure Active Directory, Okta, OneLogin, GSuite, JumpCloud, Generic LDAP

Secrets Manager - Secrets

Note: Requires Secrets Manager subscription

Secrets Manager - Projects

Secrets Manager - Service Accounts

Import/Export

Trigger Node

The Bitwarden Trigger node polls for organization events at configurable intervals.

Supported Events

• All Events
• Member Invited
• Member Accepted
• Member Confirmed
• Member Updated
• Member Removed
• Collection Created
• Collection Updated
• Collection Deleted
• Group Created
• Group Updated
• Group Deleted
• Policy Updated
• Organization Updated

Configuration

Usage Examples

Invite a New Member

// Workflow: HR System Integration
// When a new employee is added to HR system, invite them to Bitwarden

// Bitwarden Node Configuration
{
  "resource": "member",
  "operation": "create",
  "email": "{{$json.employeeEmail}}",
  "type": 2, // User
  "accessAll": false,
  "collections": [
    {
      "id": "department-collection-id",
      "readOnly": false,
      "hidePasswords": false,
      "manage": false
    }
  ]
}

Sync Groups with Directory

// Workflow: Nightly Directory Sync
// Trigger directory sync and check results

// Bitwarden Node Configuration - Trigger Sync
{
  "resource": "directorySync",
  "operation": "sync",
  "syncType": "incremental"
}

// Bitwarden Node Configuration - Get History
{
  "resource": "directorySync",
  "operation": "getSyncHistory"
}

Monitor Security Events

// Workflow: Security Alerting
// Send alerts for security-related events

// Bitwarden Trigger Configuration
{
  "event": "policyUpdated"
}

// Then route to Slack/Email for alerting

Environment Support

Error Handling

The node handles common Bitwarden API errors:

Security Best Practices

1. Credential Security: Store API credentials securely in n8n's credential system
2. Principle of Least Privilege: Use organization accounts with minimal required permissions
3. Audit Logging: Monitor the Events resource for security-relevant activities
4. Secure Self-Hosted: If using self-hosted Bitwarden, ensure HTTPS is properly configured
5. Rotate API Keys: Periodically rotate organization API keys using the Organization resource

Development

# Install dependencies
npm install

# Build the project
npm run build

# Watch mode for development
npm run dev

# Run linting
npm run lint

# Fix linting issues
npm run lint:fix

# Run tests
npm test

# Run tests with coverage
npm run test:coverage

Author

Velocity BPA

• Website: velobpa.com
• GitHub: Velocity-BPA

Licensing

This n8n community node is licensed under the Business Source License 1.1.

Free Use

Permitted for personal, educational, research, and internal business use.

Commercial Use

Use of this node within any SaaS, PaaS, hosted platform, managed service, or paid automation offering requires a commercial license.

For licensing inquiries: licensing@velobpa.com

See LICENSE, COMMERCIAL_LICENSE.md, and LICENSING_FAQ.md for details.

Contributing

Contributions are welcome! Please ensure all contributions comply with the BSL 1.1 license terms.

1. Fork the repository
2. Create a feature branch
3. Commit your changes
4. Push to the branch
5. Open a Pull Request

Support

• Documentation: Bitwarden Public API Documentation
• Issues: GitHub Issues
• Commercial Support: licensing@velobpa.com

Acknowledgments

• Bitwarden for their excellent password management platform and API
• n8n for the workflow automation platform
• The open-source community for continuous support and feedback