Active Directory Integration

Connect LastPass with your Active Directory to automate and scale password management.

What is Active Directory integration?

Many businesses leverage Microsoft Active Directory (AD) to manage their users. AD is the source of truth for who works at the company, the things they need to access and their permission levels.

When implementing new services like LastPass, integrating with your existing AD simplifies the onboarding process. LastPass integrates with AD to automate account creation, user termination, group management and more.

Integrate with your source of truth

We support the most popular directories so you can save your IT staff valuable time and keep your data more secure.

List of active directory services that integrate with LastPass Enterprise.

Microsoft™ Active Directory

A configurable, lightweight client that syncs user profiles from your on-premise AD.

Microsoft™ Azure AD

Through a SCIM API, our Azure AD endpoint syncs user profiles from your consolidated cloud directory.

Okta

Provision and deprovision from your single sign-on provider through a SCIM API.

OneLogin

Manage onboarding, offboarding, and groups by leveraging a SCIM API for your OneLogin directory.

Custom API

Larger enterprises with complex onboarding needs can leverage our flexible, powerful API.

Diagram of how a single sign on can be used to access all of your cloud apps.

How Does AD Integration Work?

The LastPass AD Connector is a configurable, lightweight client that syncs user profiles from your on-premise AD/LDAP to LastPass. When new users are created in your AD, LastPass can automatically provision them with a LastPass account.

When users are disabled or deleted, LastPass can automatically disable or terminate their LastPass account. By recognizing user status, LastPass helps you automate oversight of password management in your business.