HELP FILE

Step #1: Create a Provisioning Token and Capture the Connection URL

To begin the setup process for LastPass using Azure AD, capture both the Connection URL and Provisioning Token from the LastPass Admin Console.

Before you begin: It is required that you enable the “Permit super admins to reset Master Passwords” policy for at least one LastPass admin (who is also a non-federated admin, if you are setting up federated login) in the LastPass Admin Console. This ensures that all LastPass user accounts can still be recovered (via Master Password reset) if a critical setting is misconfigured or changed for after setup is complete.
Tip: Open a text editor application so that you can save the values that will be used to connect LastPass and Azure AD.
The steps below are performed in the LastPass Admin Console.
  1. Access the LastPass Admin Console by opening a web browser and navigating to either of the following:

    Note: In Australia, Singapore, and India, there are data storage centers, but your data will be transferred through the US data center.

  2. Enter your LastPass admin email address and Master Password, then click Log In.
  3. Go to Settings > Directory integrations in the left navigation.
  4. Select the Azure AD tab.
  5. Under Connection, copy the URL and paste it into your text editor.

    Remember: You will be using this value in later steps.

  6. Click Create Provisioning Token to generate it, then immediately copy the Token and paste it into your text editor.

    Remember: You will be using this value in later steps.

    Warning: Please note that if you have already established a token in Azure AD, then selecting Reset Provisioning Token will invalidate the previous token, and will require you to update Azure AD with the new token.

    Troubleshooting: If you navigate away from the Azure AD tab before the Provisioning Token has been copied, you will need to generate a new one by selecting Reset Provisioning Token.

You have captured both the Connection URL and Provisioning Token from the LastPass Admin Console.