Alternative Password manager than Teampass with free AD functionality
reddit / selfhosted

----------------------------------------------------------------------
madwols · 2023-10-19 10:24

Hello everyone,

​

I want to self-host a password manager with organizational
capabilities like sharing Passwords across organizations and using AD
for user management.

Do you have any solutions for my use case?

​

Thanks in advance.

----------------------------------------------------------------------
thekrautboy · 2023-10-19 10:40

I dont remember ever seeing a selfhosted pw manager for teams that
supports AD.

Maybe look at https://www.passbolt.com/ and you could connect that
somehow.

----------------------------------------------------------------------
8-16_account · 2023-10-19 11:10

>using AD for user management

Do you mean that it authenticates with AD (like with LDAP), or that
you want the password manager to manage AD users?

----------------------------------------------------------------------
revereddesecration · 2023-10-19 11:21

I host Psono and auth via OIDC provided by Authentik.

I chose Psono because it was the only option that offered OIDC on a
free tier. Previously I paid for Passbolt which wasn’t bad, but Psono
does the same job for free and is nicer to use.

----------------------------------------------------------------------
madwols · 2023-10-19 12:12

Connect with the LDAP

----------------------------------------------------------------------
madwols · 2023-10-19 12:13

Thank you, I will take a look

----------------------------------------------------------------------
8-16_account · 2023-10-19 12:22

We're using ManageEngine Password Manager Pro. It's not perfect, but
it does the job.

----------------------------------------------------------------------
madwols · 2023-10-19 12:24

I don’t think this one is free though, I am looking for an open source
one

----------------------------------------------------------------------
madwols · 2023-10-19 12:24

I don’t think this one is free though, I am looking for an open source
one

----------------------------------------------------------------------
jkirkcaldy · 2023-10-19 13:33

I think vaultwarden has ldap sync

----------------------------------------------------------------------
adamshand · 2023-10-19 18:20

I don't know if the open source / selfhostable version includes it,
but BitWarden supports this:

https://bitwarden.com/help/ldap-directory/

There is a side project for Vaultwarden (the open source, Rust clone
of Bitwarden) which enabless automatically inviting LDAP users, that
should work with AD (but I haven't tested or read the docs).

https://github.com/ViViDboarder/vaultwarden_ldap

----------------------------------------------------------------------
Ritvikarajkumar · 2023-10-20 10:40

You may consider looking into Securden Password Vault for Enterprises,
which would meet all your requirements for a self-hosted password
manager. It lets you store and manage all your sensitive credentials
from a single, centralized location.

You can import your users by integrating with the Active Directory,
Azure AD, and LDAP. Your users can use their AD credentials to log in
to Securden. You can have the privilege of keeping the AD in
synchronization so that when a user gets added to the AD, he/she will
automatically become a user.

You can easily share accounts with other users in your organization
and monitor users’ activities over account usage. It comes in three
editions; the starter edition is free for up to five users.
https://www.securden.com/password-manager/index.html (Disclosure: I
work for Securden)

----------------------------------------------------------------------
sk1nT7 · 2023-10-20 13:35

What about Bitwarden Unified for selfhosters?

----------------------------------------------------------------------
GuruShelbyLee · 2023-10-20 16:53

I work at passbolt and we value transparency and being open, so here
are the facts:

Passbolt supports LDAP as part of the **Pro** version.

It's a paid feature so the team can provide better support and assist
in maintaining those connection (let's be honest, it can be a pain in
the ass and we value our time as well as your sanity). While Pro is a
paid version, it's still self-hosted and completely open source. Other
features at that level are Escrow, SSO (Microsoft and Google), MFA
Policies, Activity logs, Action logs (syslogs/log files), Password
Policies, Passphrase Policies, and more.

Feel free to provide feedback and/or ask questions!

----------------------------------------------------------------------
thekrautboy · 2023-10-20 17:08

Thanks for letting us know!

Too bad LDAP is only in the paid version, guess that rules it out for
OP here then.