Set up SCIM Provisioning for LastPass using PingOne
IT admins can easily benefit from secure administration of LastPass Business accounts by using our PingOne integration.
- Secure configuration and deployment of LastPass
- Automated provisioning of LastPass user accounts
- Real-time deprovisioning of LastPass user accounts
Account requirements
Syncing your PingOne user directory with LastPass requires the following:
- An active PingOne subscription
- An active trial or paid LastPass Business account
- An active LastPass Business admin (required when activating your trial)
Note: If you have not started a LastPass Business trial, contact our Sales team at lastpass.com/contact-sales for more information.
The SCIM endpoint used to integrate LastPass with PingOne does not require any software installation.
This integration does not allow users to log in to LastPass with their PingOne password. Completing only the SCIM Provisioning steps for PingOne will still require the user to create and remember a separate master password to log in to LastPass, which is used to create the unique encryption key for their LastPass vault.
LastPass does support federated login with PingOne, which allows users to log into LastPass using their PingOne account. To set up federated login with PingOne, please see Set Up Federated Login for LastPass using PingOne.
Before you begin
- It is strongly recommended that you enable the “Permit super admins to reset Master Passwords” policy for at least one LastPass admin in the LastPass Admin Console. This ensures that all LastPass user accounts can still be recovered (via master password reset) if a critical setting is misconfigured or changed after setup is complete.
- It is helpful to open a text editor application so that you can copy and paste values that will be used between your LastPass Admin Console and the PingOne Admin portal.
Set up and configure
To register and integrate your LastPass Business account with PingOne, complete all of the steps in this guide.