HELP FILE

How do I set up LastPass Workstation Login for Windows as an admin?

As a LastPass MFA or LastPass Identity admin, you can download the LastPass Workstation Login silent installer and deploy it to your users' Windows machines. You can also configure policies for Workstation Login that suit your business needs.

Once deployed, your users must run the installer to set up Workstation Login on their individual machines. When the installation is complete, they will be able to use the LastPass MFA app's stored biometrics, pattern, or a One-Time Passcode to log in to their workstations.

Account and system requirements

  • A LastPass MFA or LastPass Identity trial or paid account that has been activated
  • A Windows machine running Windows 8.1 or later
  • A mobile device with the LastPass MFA app installed and registered to a LastPass MFA account

Step #1: Configure policies for Workstation Login

You can configure policies for your users that involve authentication methods and actions users can do once they have logged in to their workstation.

  1. Log in and access the Admin Console at https://lastpass.com/company/#!/dashboard.
  2. Click MFA or SSO & MFA in the left navigation.
  3. Go to PolicyWorkstation Login in the left navigation.
  4. Click + New Policy.
  5. Enter a name for your policy.
  6. Under Authentication methods, use the drop-down menus to select Enabled or Disabled for:
    • Use of the LastPass MFA app (must be enabled to use Workstation Login)
    • Use of the LastPass MFA app in Offline mode, which allows users to authenticate using a One-Time Passcode when no Internet connection is present
  7. Under Options, use the drop-down menu to select Enabled or Disabled for the using SSO via Workstation Login. This will allow users (assigned to this policy) to authenticate via Workstation Login, then be able to launch Cloud Apps and automatically log in via SSO without additional authentication prompts.

    Note: This does not allow your users to log in to their LastPass Vault, they must still log in to LastPass to access your password management Vault.

  8. Click Save when finished.
  9. Assign your desired users your new policy.

Step #2: Download the LastPass Workstation Login silent installer for Windows

  1. Log in and access the Admin Console at https://lastpass.com/company/#!/dashboard.
  2. Click MFA or SSO & MFA in the left navigation.
  3. Go to PolicyWorkstation Login in the left navigation.
  4. Click the Windows hyperlink to download the Workstation Login installer for Windows.

Step #3: Deploy the Workstation Login installer to your users

Once downloaded, you can deploy the silent installer using your organization's preferred distribution methods.

Step #4: Provide instructions to your users for installing Workstation Login

Instruct your users to install Workstation Login on their Windows machine (instructions here) post-deployment.

You're all set!

Once you've deployed the Workstation Login installer and configured your desired policies, your users can set up Workstation Login via the installer you deployed. Once set up, your users can log in to their Windows machines – no password required!

To see your end users' passwordless login experience for their workstation, please see How do I log in to Windows using LastPass Workstation Login?

Related

How do I install LastPass Workstation Login on a Windows machine as a user?

How do I log in to Windows using LastPass Workstation Login?