product icon
Manage Groups for LastPass SSO Apps

Manage Groups for LastPass SSO Apps

    You can create user groups within your account for better management and organization. Group members can be assigned to the same LastPass SSO apps and/or policies, and typically reflect an organization's structure, such as departments, projects, or teams.

    Group management is available in all LastPass Admin Consoles (i.e., Password Manager, MFA, SSO, and SSO & MFA). Any changes made to groups in any of the Admin Consoles will retroactively reflect across all admin environments that are available for your account. Additionally, when users and groups are added via directory sync (e.g., LastPass AD Connector, federated login using Azure AD or AD FS, etc.), they are also added across all Admin Consoles available for your account.

    Note: Are you seeing something different? Learn how to navigate in the New Admin Console.

    Add a group and assign members

    1. Log in and access the LastPass Admin Console by doing either of the following:
      1. While logged in to LastPass, click the active LastPass icon in your web browser toolbar, then select Admin Console in the menu.
      2. Log in at https://lastpass.com/?ac=1 with your username and Master Password, then select Admin Console in the left navigation.
    2. In the left navigation of the Admin Console, select SSO, MFA, or SSO & MFA.
    3. Click Users in the left menu, then select Groups.
    4. Click + Add Group in the upper-right navigation.
    5. Enter a group name, then click Save.
    6. Locate and select your desired users. You can deselect by clicking on the user again, or click Remove All to remove all selected users.
    7. Click Save when finished.

    Manage assigned group members

    1. While logged in to the SSO, MFA, or SSO & MFA Admin Console, go to Users > Groups in the left menu.
    2. Click the Assign Users icon .
    3. Locate and select your desired users. You can deselect by clicking on the user again, or click Remove All to remove all selected users.
    4. Click Save when finished.

    Edit or delete a group

    1. While logged in to the SSO, MFA, or SSO & MFA Admin Console, go to Users > Groups in the left menu.
    2. Click the Edit icon , then choose from the following options:
      • Make changes to the group name, then click Save.
      • To undo any changes and return to group management, click the Undo icon .
      • To remove the group, click the Delete icon .
    Related Articles