On Sept 22, 2025, some customers reported certain users were temporarily deactivated, removed from user groups, and groups were deleted by SCIM without any customer action. Some of these users were later reactivated/added to user groups, and groups were recreated by SCIM also without any action within the LastPass Admin Center.
Our engineers have found the cause of the issue in our sync logic, based on the sync responses LastPass receives from our customers' Identity Service Provider (IdP).
What we're doing about it in the meantime:
- Our engineers are discussing a potential solution to change our sync logics to mitigate unexpected changes should we get 0 group info from our customers' IdP (in this case it is Google Workspace) in the future. We will keep you posted as we make progress towards towards the potential solution.
- We are also working on enhancing our internal alert system to closely monitor the potential fix once it goes live.
Thank you for your patience if you were inadvertently affected by this issue, and we expect to have more answers soon.
