Cbox ID
LastPass
LastPass
Single sign-on (SAML 2.0)
In the portal, choose LastPass under Enterprise SSO and Start with LastPass. Then, in LastPass:
- In the LastPass Admin Console, go to Applications → SSO apps and select Add app.
- Select Custom Service, then Add new domain.
- Choose the groups and additional users that have access to this service.
- Enter the Assertion Consumer Service and Service Provider entity ID below, and select Save.
- Turn on "Service is enabled", save, and copy the SAML IdP Metadata.
The values the portal shows
| LastPass field | Value |
|---|---|
| Assertion Consumer Service | The portal's ACS URL (https://…/sso/saml/…/acs) |
| Service Provider entity ID | The portal's entity ID (https://…/sso/saml/…) |
| Launch URL, optional | The portal's sign-in URL (https://…/sso/saml/…/login) |
What to bring back
Copy SAML IdP Metadata — the URL, or the XML — and paste it into the portal's Metadata URL or XML. Prefer the URL.
The assertion must be signed, and must carry the person's email address as an attribute or as a NameID in the emailAddress format. See Any SAML 2.0 provider for the details.
LastPass's own guide: https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass/uac_applications_sso_apps.html&_LANG=enus.
Then verify your domain and turn single sign-on on in the portal: Enterprise SSO.
Related
- Identity provider guides — every provider the portal guides you through.
- Enterprise SSO — the portal's five steps.