product icon

Access Policy Management

    LastPass admins can set up general access policies to specify approved or prohibited geofencing locations and/or allowed or denied IP ranges from which users can authenticate using the LastPass Authenticator app. These policies can be applied for general access, or for specific integrated SSO apps.

    Restriction: This feature might not be available for your account as this is a legacy feature.
    Note: Are you seeing something different? See instructions for the New Admin Console.
    Before you begin: Please set up the following policies:
    1. Log in and access the Admin Console at!/dashboard.
    2. Select MFA or SSO & MFA in the left navigation.
    3. Click Policy > Access.
    4. To create a new policy, click +New Policy.
    5. Set up the policy as you need and click Save.
    6. Set the Policy Level to General Access Policy for all applications or select an application from the menu.
    7. To limit access to a specific time range, add Policy Time Range.
    8. Select Permanent Policy or Temporary Policy.
      Note: If you choose a Temporary Policy, select a date for the policy.
    9. Optional: For employees who need temporary access from a different location, select Allow standard access outside temporary date range.
    10. Optional: For contractors who only need limited time access, select Restrict access outside temporary date range.