HELP FILE

How do I invite existing LastPass users in my managed company to activate passwordless login?

    If you recently purchased the Advanced MFA add-on for your managed company account and now need to invite existing LastPass users for that managed company to set up passwordless login, you can send those users the invitation to get started with the setup process.

    Note: This feature requires a managed company account with the Advanced MFA add-on. How do I enable the Advanced MFA add-on for my managed company account?
    1. Log in to the primary account's LastPass Admin Console by doing either of the following:
      • Select the active LastPass icon active LastPass icon > Admin Console.
      • Navigate to the new Admin Console at https://admin.lastpass.com/ and log in with your LastPass admin (MSP technician) email address and master password.
    2. On the Home tab, select Managed companies in the left navigation.
    3. Locate your desired managed company, then select Manage company in the right navigation.

      Result: The managed company's Admin Console opens in new tab on your web browser.

    4. Go to Users > Users.
    5. Select the tab of your desired Passwordless app and proceed with those instructions:
      Passwordless app Instructions to assign users
      SSO apps
      1. Select Edit policy users > Continue.
      2. Choose one of the following options and assign users:
        • All users – Click Save changes.
        • Only these users/groups – Select Assign users & groups, select the users & groups you want to include for this policy, then select Assign Users > Save & finish.
        • All except these users/groups – Select Assign users & groups, select the users & groups you want to exclude from this policy, then select Assign Users > Save & finish.
      Workstation Login Choose from the following options:

      Troubleshooting: If the users you want to assign to a Passwordless app already have an Invited, Active, or Locked status listed under the Passwordless Status column (under Users > Users), select your desired user(s) and click Resend invitation for passwordless instead.

      Tip: If you have selected user(s) with conflicting Passwordless Statuses (i.e., a user with no status and another user with an Invited, Active, or Locked status), then the Resend invitation for passwordless option will not be displayed until you deselect the user(s) with no status.

    You have sent the passwordless login activation email to your selected existing user(s).
    What to do next: See your end user's experience for activation at How do I activate passwordless login for SSO apps and workstations?
    Related Articles