HELP FILE

How do I set up LastPass Workstation Login for Windows as an admin?

As a LastPass MFA or LastPass Identity admin, you can download the LastPass Workstation Login silent installer and deploy it to your users' Windows machines. You can also configure policies for Workstation Login that suit your business needs.

Once deployed, your users must run the installer to set up Workstation Login on their individual machines. When the installation is complete, they will be able to use the LastPass MFA app's stored biometrics, pattern, or a One-Time Passcode to log in to their workstations, depending on the policies enabled.

Note: Are you seeing something different? See instructions for the New Admin Console.

Account and system requirements

  • A LastPass MFA or LastPass Identity trial or paid account that has been activated
  • A Windows machine running Windows 10 or later
  • A mobile device with the LastPass MFA app installed and registered to a LastPass MFA account – View LastPass MFA app activation instructions

Step #1: Configure policies for Workstation Login

You can configure policies for your users that involve authentication methods and actions users can do once they have logged in to their workstation.

  1. Log in and access the Admin Console at https://lastpass.com/company/#!/dashboard.
  2. Select MFA or SSO & MFA in the left navigation.
  3. Go to Policy > Workstation Login in the left navigation.
  4. Click + New Policy.
  5. Enter a name for your policy.
  6. Check the box(es) for either of the following policy settings:
    • Allow authentication when workstation is offline – Allows users (assigned to this policy) to authenticate using the LastPass MFA app in "offline mode", which allows users to authenticate using a One-Time Passcode when no Internet connection is present.
    • Allow using Cloud SSO apps without further authentication – Allows users (assigned to this policy) to authenticate via Workstation Login, then be able to launch Cloud Apps and automatically log in via SSO without additional authentication prompts.
      Note: While this logs the user in to their Cloud Apps portal, this does not log the user directly in to their LastPass Vault. Users must still log in to LastPass separately to access their password management Vault.
  7. Click Save when finished.
  8. Assign your desired users your new policy.

Step #2: Download the LastPass Workstation Login silent installer for Windows

  1. Log in and access the Admin Console at https://lastpass.com/company/#!/dashboard.
  2. Click MFA or SSO & MFA in the left navigation.
  3. Go to Policy > Workstation Login in the left navigation.
  4. Click the Windows hyperlink to download the Workstation Login installer for Windows.

Step #3: Deploy or distribute Workstation Login

Once downloaded, choose from the following:

  • If your users do not have local admin permissions and you want to install it for them – Deploy the silent installer using your organization's preferred distribution methods. Once installed, provide your users with these instructions for pairing their LastPass account using the LastPass MFA app.
  • If your users have local admin permissions and you want them to install it on their own – Distribute the installer to your users, and provide them with the following instructions:
    1. Install LastPass Workstation Login for Windows
    2. Pair the LastPass MFA app

Step #4: Follow up with your users

Once your users complete the setup process, your users can log in to their Windows machines – no password required!

To see your end users' passwordless login experience for their workstation, please see How do I log in to Windows using Workstation Login for LastPass?