Once a LastPass Business admin enables federated login for the organization, new users can use their existing company account (that is, AD FS, Microsoft Entra ID, Okta, Google Workspace, PingOne, PingFederate, or OneLogin) to log in to LastPass. As a result, no separate master password required.
Important:
- Federated login does not work through mobile web browsers on Android and iOS, and through web login without the LastPass browser extension installed. For more information, see What are the limitations for LastPass users with federated login?
- As a federated user, you are unable to reset your master password in Account settings. This must be done by your LastPass admin or within your Active Directory environment. If your master password is ever reset either by an admin, or yourself due to a forced master password reset, your account will be converted to a non-federated user account.
Related Articles