HELP FILE

How do I assign users to use passwordless authentication for Passwordless apps in the new Admin Console?

Allow your users to use passwordless authentication (verifying your identity using biometrics via the LastPass Authenticator app) to access Passwordless apps (SSO apps and/or workstations) without using a password by assigning them to the Passwordless app.

Note: This feature requires an account with the LastPass Business + Advanced MFA add-on. How do I upgrade my LastPass Business account with an add-on?
  1. Log in with your email address and master password to access the new Admin Console at https://admin.lastpass.com.
  2. Go to Applications > Passwordless apps.

    Troubleshooting: If you have not set up passwordless authentication before, click Get Started > Continue.

  3. Select the tab of your desired Passwordless app and proceed with those instructions:
    Passwordless app Instructions to assign users
    SSO apps
    1. Select Edit policy users > Continue.
    2. Choose one of the following options and assign users:
      • All users – Click Save changes.
      • Only these users/groups – Select Assign users & groups, select the users & groups you want to include for this policy, then select Assign Users > Save & finish.
      • All except these users/groups – Select Assign users & groups, select the users & groups you want to exclude from this policy, then select Assign Users > Save & finish.
    Workstation Login Choose from the following options:

    Troubleshooting: If the users you want to assign to a Passwordless app already have an Invited, Active, or Locked status listed under the Passwordless Status column (under Users > Users), select your desired user(s) and click Resend invitation for passwordless instead.

    Tip: If you have selected user(s) with conflicting Passwordless Statuses (i.e., a user with no status and another user with an Invited, Active, or Locked status), then the Resend invitation for passwordless option will not be displayed until you deselect the user(s) with no status.

You have assigned your desired users & groups to your selected Passwordless app so they can use passwordless authentication when accessing the chosen app.
Note: If the users & groups you assign to the Passwordless app have not already set up passwordless authentication, they will be sent an activation email to get started.
What to do next: See your end user's experience for activation at How do I activate passwordless authentication?