Comment by Valodim

6 hours ago

So what is the point of this, if the user still needs a master password?

Creating, deleting, blocking accounts is the main one - you only do it once for a user and they get access to all your services. It also lets you do MFA and security checks on login (like on a new device) which can prevent break-ins even if your users use easily crackable passwords.

Access control -- can make it easy to add/sync users in Authentik using one username

Maybe if you deactiveer a users entra id that he cant access its vaultwarden vault anymore.