# Keep Bitwarden Directory Connector’s desktop and scheduled CLI runs from competing

> The desktop app and CLI share local configuration, so treat them as one synchronization workflow.

- Canonical URL: https://update.dsesecurity.com/updates/bitwarden-directory-connector-shared-config-scheduling/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-10-15T13:33:52+00:00
- Modified: 2026-10-15T13:36:18+00:00
- Last reviewed by DSE: 2026-10-15
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 2 minutes

## What you need to know

The desktop app and CLI share local configuration, so treat them as one synchronization workflow.

## Potentially affected

This applies to Bitwarden Directory Connector, not SCIM or SSO authentication. A scheduled process still needs access to the chosen directory and the organization’s provisioning credentials.

## DSE recommendation

DSE recommends naming one synchronization host and one operational owner.

## Article

The desktop app and CLI share local configuration, so treat them as one synchronization workflow.

## Source facts

Bitwarden Directory Connector pulls users, groups, and associations from a supported source directory. It can run on demand or at a configured interval and can be configured to remove disabled users from the organization without deleting their accounts. The desktop app and CLI share their database and configuration, and Bitwarden does not recommend using them simultaneously on one machine. Its documented approach is to configure and test with the desktop app, then use the CLI to schedule production synchronization.

Source: [Bitwarden — Directory Connector](https://bitwarden.com/help/directory-sync/).

## Applicability

This applies to Bitwarden Directory Connector, not SCIM or SSO authentication. A scheduled process still needs access to the chosen directory and the organization’s provisioning credentials.

## DSE recommendation

DSE recommends naming one synchronization host and one operational owner. Complete a reviewed configuration in the desktop app, record the intended source and scope, then document how the scheduled CLI obtains that same configuration. Pause the scheduled task while making controlled desktop changes rather than running competing sessions. Review removal behavior before enabling automatic production runs, and maintain a protected change record for configuration and credential updates. Monitor completion and failures so a silent stalled task does not leave identity changes unapplied.

## Verification

Use test users and groups to compare a desktop run with the intended scheduled CLI run, one at a time. Confirm the configured source scope and handling of a disabled test user. Verify that the schedule reports success or failure and that an administrator knows how to pause it during maintenance.

## Official reference

[Bitwarden — Directory Connector](https://bitwarden.com/help/directory-sync/). Reviewed October 15, 2026.

## Primary reference

- Name: Bitwarden — Directory Connector
- Authority: bitwarden.com
- URL: https://bitwarden.com/help/directory-sync/
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Keep Bitwarden Directory Connector’s desktop and scheduled CLI runs from competing,” DSE Security, https://update.dsesecurity.com/updates/bitwarden-directory-connector-shared-config-scheduling/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.