Bitwarden supports various forms of two-factor authentication, including time-based one-time passwords (TOTP), Duo, YubiKey, and other hardware-based tokens. This integration enhances the security of the Bitwarden account and allows to store and manage their 2FA credentials for other applications within Bitwarden itself.
This tool is essentially a hack, making the user experience pretty weak. For example, we use it in an application which has a box to type your password. Every time you enter some data, ESSO steals the focus and types your password into the box, even if you aren't about to submit the form requiring the password.
This tool creates a 2nd CN in the directory and this broke some of our applications which were only expecting a single CN per user in the directory. Why can't it use a traditional database instead?
This tool caused performance issues with Putty. It would peg our CPUs at 100% if the user had Putty running. It took a very long time to resolve the issue.
Bitwarden is easy to use and has a very straightforward simple interface. Having coverage across multiple platforms is the key to its value to me. Additionally, Bitwarden is consistently rated by third party (PC Magazine, Wired, Tom's Guide, etc.) as one of the best password managers available.
There's no substitute for properly developed applications that delegate authentication to an external system like Active Directory or a cloud identity provider. That way, the issues with screen scraping and constantly-breaking integration are solved permanently.
Saves me time by storing all of my login information. I'm no longer digging through my notes app or having to reset passwords that I've forgotten.
Stores vendor names, addresses, and W-9's. I don't have to text or email vendor's asking for this info every time I work with them.
Protects my data by identifying weak or unused passwords. Bitwarden helped me identify multiple weak and reused passwords and I quickly updated them using their built-in password generator.
We spent a lot of time implementing it on different applications. However, because it uses screen scraping, every time our apps upgraded, it broke the integration with ESSO, so we had to keep fixing the integration. After a few years, we have stopped integrating new apps with it due to this headache.