Integrate Symantec VIP with my LastPass Business account

LastPass Business supports Symantec VIP authentication. In order to set up this integration, you must provide LastPass with a Symantec VIP certificate.

Required for setup

Symantec VIP account
LastPass Business account

Step #1: Download the Symantec VIP certificate for LastPass

Follow the instructions to request a Symantec VIP certificate and download it in PEM format.

Step #2: Set up the Symantec VIP integration in LastPass Business

Log in and access the Admin Console at https://lastpass.com/company/#!/dashboard.
Go to Advanced > Enterprise Options > Multifactor options > Symantec VIP.
Select Choose file and upload your certificate in PEM format.
Enter your Certificate Password.
Select Update.

Step #3: Enable Symantec VIP as a Multifactor Option

From within the Admin Console, go to Advanced > Enterprise Options > Multifactor options.
Under Enabled Multifactor Options, toggle on the switch for the Symantec VIP option.

Step #4: Add and configure a Multifactor Authentication policy

In the new Admin Console, go to Policies > General policies.
Under the Password multifactor policy category, select Require use of any MFA option.
Select your desired user list for which this policy should be applied.
Optional: In the Settings field, enter notes for additional information about this policy.
Select Enabled in the Status field.
Select Save changes when finished.

Step #5: Advise your users to set up Multifactor Authentication

Once you have completed the steps above, your users can set up and enable Multifactor Authentication for their LastPass Business account.

About the removal of users enabled with Symantec VIP

The Symantec VIP integration is associated with your LastPass Business account. If you remove users from your company account without first disabling Symantec VIP as their multifactor authentication option, then – once removed – those users may become locked out of their LastPass account (if their account is converted to a LastPass Free account). For this reason, we recommend disabling the Symantec VIP for users you plan to remove.

About this task: To disable Symantec VIP for certain users, perform the following steps.

Go to https://lastpass.com/company/#!/dashboard and log in to access the Admin Console.
Select Users in the left navigation.
Check the boxes next to your desired users.

Tip: To sort by users enabled with Symantec VIP, click the Multifactor column header row in the users table.
Select More actions > Disable multifactor for selected users.
Click OK to confirm.

Results: You have disabled Symantec VIP for your selected users, and you can now safely remove those users from your company account without risk of locking them out (if their accounts convert to LastPass Free accounts).