Set Up SCIM Provisioning for LastPass Using Okta

IT admins can easily benefit from secure administration of LastPass Business accounts by using our Okta integration.

The Okta integration offers:

Secure configuration and deployment of LastPass
Automated provisioning of LastPass user accounts
Real-time deprovisioning of LastPass user accounts
Assigning LastPass access to groups in Okta

Summary

LastPass supports the following provisioning features:

Create Users
Update User Attributes
Deactivate Users
Push Groups

Completing only the SCIM Provisioning steps for Okta (outlined in this guide) will still require the user to create and remember a separate master password to log in to LastPass, which is used to create the unique encryption key for their LastPass vault.

Account requirements

Syncing your Okta user directory with LastPass requires the following:

An active Okta provisioning subscription
An active trial or paid LastPass Business account
An active LastPass Business admin (required when activating your trial)
Note: If you have not started a LastPass Business trial, contact our Sales team at lastpass.com/contact-sales for more information.

The SCIM endpoint used to integrate LastPass with Okta does not require any software installation.

Completing only the SCIM Provisioning steps for Okta will still require the user to create and remember a separate master password to log in to LastPass, which is used to create the unique encryption key for their LastPass vault.

LastPass does support federated login with Okta, which allows users to log into LastPass using their Okta account. To set up federated login with Okta, please see Set Up Federated Login for LastPass Using Okta With an Authorization Server.

Before you begin

It is strongly recommended that you enable the “Permit super admins to reset Master Passwords” policy for at least one LastPass admin in the LastPass Admin Console. This ensures that all LastPass user accounts can still be recovered (via master password reset) if a critical setting is misconfigured or changed after setup is complete.
It is helpful to open a text editor application so that you can copy and paste values that will be used between your LastPass Admin Console and the Okta Admin portal.

Set up and configure

To register and integrate your LastPass Business account with Okta, complete all of the steps in this guide.

In this section: