HELP FILE

How do I set up LastPass Workstation Login for Windows as an admin?

    As a LastPass Business admin, you can download the LastPass Workstation Login silent installer and deploy it to your users' Windows machines. You can also configure policies for Workstation Login that suit your business needs.

    Once deployed, your users must run the installer to set up Workstation Login on their individual machines. When the installation is complete, they will be able to use the LastPass Authenticator app's stored biometrics or a One Time Password to log in to their workstations, depending on the policies enabled.

    Note: This feature requires an account with the LastPass Business + Advanced MFA add-on. How do I upgrade my LastPass Business account with an add-on?

    Account and system requirements

    • An active LastPass Business + Advanced MFA add-on trial or paid account
    • A Windows machine running Windows 10 or later
    • A mobile device with the LastPass Authenticator app installed and with passwordless login activated – View activation instructions

    Step #1: Configure policies for Workstation Login

    You can configure policies for your users that involve authentication methods and actions users can do once they have logged in to their workstation.

    1. Log in with your email address and master password to access the new Admin Console at https://admin.lastpass.com.
    2. If prompted, complete steps for multifactor authentication (if it is enabled for your account).
    3. Go to Applications > Passwordless Apps > Workstation Login.
    4. Click New Policy.
    5. Enter a Policy Name.
    6. If desired, check the box(es) for either of the following settings:
      • Allow authentication when workstation is offline – This allows users to log in using Workstation Login to authenticate using a One-Time Passcode when no Internet connection is present.
      • Allow using Cloud SSO apps without further authentication – This will allow users/groups (assigned to this policy) to authenticate via Workstation Login, then be able to launch Cloud SSO Apps and automatically log in via single sign-on without additional authentication prompts.
        Note: While this logs the user in to their Cloud Apps portal, this does not log the user directly in to their LastPass vault. Users must still log in to LastPass separately to access their password management Vault.
    7. Click Save.

      Add policy for Workstation Login

    8. Select your desired users/groups to assign to this policy.
    9. When finished, click Save.

      Troubleshooting: When you assign users to your policy, if they have not already set up passwordless login, they will be sent an activation email to get started.

    Results: You have created a Workstation Login policy and assigned your selected users/groups.

    Step #2: Download the LastPass Workstation Login silent installer for Windows

    Save the silent installer for Windows.

    1. Log in with your email address and master password to access the new Admin Console at https://admin.lastpass.com.
    2. If prompted, complete steps for multifactor authentication (if it is enabled for your account).
    3. Go to Applications > Passwordless Apps > Workstation Login.
    4. Click the Windows hyperlink to download and save the WorkstationLoginInstaller.zip file for Windows.

      Workstation Login installers

    Step #3: Deploy or distribute Workstation Login

    Once downloaded, choose from the following:

    • If your users do not have local admin permissions and you want to install it for them – Deploy the silent installer using your organization's preferred distribution methods. Once installed, provide your users with these instructions for pairing their LastPass account using the LastPass Authenticator app.
    • If your users have local admin permissions and you want them to install it on their own – Distribute the installer to your users, and provide them with the following instructions:
      1. Install LastPass Workstation Login for Windows
      2. Pair the LastPass Authenticator app

    Step #4: Follow up with your users

    Once your users complete the setup process, your users can log in to their Windows machines – no password required!

    To see your end users' passwordless login experience for their workstation, please see How do I log in to Windows using Workstation Login for LastPass?

    Related Articles