HELP FILE

How do I manage my URL Rules as an Enterprise Admin?

As a LastPass Enterprise admin, you can specify how you want LastPass to handle specific URLs that your users visit if they are using more than one set of credentials for a website. There are three types of URL matching behaviors you can control – path, host, and port – and you can choose to add more than one of these rules to be used to display fewer login entries for your users.

Path matching

If your users have more than one set of credentials for a website (e.g., Website.com/path1 and Website.com/path2), you can specify a rule of “/path1” to only supply their credentials to Website.com/path1 and not Website.com/path2. To specify such a rule to match the path after the domain, do the following:

  1. Log in and access the Admin Console at https://lastpass.com/company/#!/dashboard.
  2. Go to Advanced OptionsURL Rules in the left navigation.
  3. Click Add New Rule.
  4. Enter the Domain or Host and Path information, then specify whether you want an Exact Host Match and/or an Exact Port Match and click Add.
  5. This rule has now been applied to all users in your LastPass Enterprise account.

Host matching

If your users have one set of credentials for "Website.com" and another set of credentials for one of its subdomains, "Help.website.com", you can control LastPass behavior by specifying a host matching rule. For instance, you could specify a rule for LastPass to only supply your users' credentials to "Website.com", not "Help.website.com". To specify such a rule, do the following:

  1. From the Admin Console, go to Advanced OptionsURL Rules in the left navigation.
  2. Click Add New Rule.
  3. Enter a Domain or Host, and for Exact Host Match, specify a value of Yes. Click Add.
  4. This rule has now been applied to all users in your LastPass Enterprise account.

Port matching

Your users may have different credentials for different ports on the same website (a port is specified at the end of a URL and is directly preceded by a colon; in https://Website.com:7634, the port is 7634). For instance, your users could have one set of credentials for https://Amazon.com:7634 and another set of credentials for https://Website.com:8547. To instruct LastPass to only supply their credentials for one port, do the following:

  1. From the Admin Console, go to Advanced OptionsURL Rules in the left navigation.
  2. Click Add New Rule.
  3. Enter a Domain or Host, and for Exact Port Match, specify a value of Yes. Click Add.
  4. This rule has now been applied to all users in your LastPass Enterprise account.

Related

LastPass Admin Management of Global Never and Global Only URLs

LastPass Admin Management of Global Equivalent Domains

LastPass Admin Management of Multifactor Authentication Options

Advanced LastPass Admin Options