What's new in the LastPass Admin Console?
Learn about the new features and changes that have been introduced in the new Admin Console for LastPass.
The main differences and improvements made in the new Admin Console for LastPass include:
- An updated navigation to streamline how you access admin controls
- Unified single sign-on, password management, and multifactor authentication controls
- Simplified admin onboarding
- New account statuses
- Easier user management
- Granular user details
- Admin management center
What is the new navigation in the Admin Console?
The LastPass Admin Console navigation has been updated to dedicated tabs for Dashboard (coming soon!), Users, Applications, Policies, Reporting, and Advanced settings. All corresponding admin controls can be found under each of the respective six tabs. The goal of this navigation is to organize the admin controls in a more streamlined manner.
What is the value of having single sign-on, password management, and multifactor authentication controls in one unified view?
In previous versions of the LastPass Admin Console, single sign-on and multifactor authentication controls were in a separate view. Now, you can secure applications with single sign-on, store credentials with password management, and add an additional layer of security for every login with multifactor authentication – all from one centralized location.
What is the simplified admin onboarding experience?
The simplified admin onboarding experience is a tour of the New LastPass Admin Console, guiding new admins through all of the necessary steps to get up and running right away with their LastPass account. Admins are also guided through the steps for adding users, adding applications, setting policies, enabling multifactor authentication, and adding more admins to the account for ease of account management.
What improvements were made to the user management admin controls?
All users in your LastPass account – including those enabled to use single sign-on, password management, and multifactor authentication – are in a single list, which makes it easier to find specific users. Admins are also able to filter by the account statuses, search by name, and filter by MFA status.
What are the new account statuses?
The user account statuses in LastPass allow admins to filter by the status for complete visibility into each user's onboarding journey and take additional action, if needed.
The new account statuses include Staged, Invited, Active, and Expired Invitation; they are defined as:
- Staged – A user’s account has been configured, but they have not yet been sent an invitation email.
- Invited – A user's configured account has been sent an invitation email, but the user has not yet activated.
- Active – A user has accepted the invitation and has logged into LastPass at least once.
- Expired Invitation – A user has been sent an invitation email, but the user has not taken any action and the invitation has expired.
- Invitations expire after 90 days for brand new users (those who did not have a LastPass account when they were invited).
- Invitations expire after 14 days for existing users (those that already have a LastPass account in our system when they were invited to join this company account).
- Awaiting Approval – A user has been added using the LastPass Active Directory Connector, which has been configured to add users as "pending" rather than automatically active.
- Disabled – A user is still part of your company account, but their access has been disabled by an admin.
What improvements were made to user details?
Admins can edit all user details from the User’s page, and view granular user details including the user’s profile, account details, groups, assigned single sign-on apps, shared folders, policies, and more. This improvement offers admins much deeper insight into end users to more easily adjust security controls as needed.
What is the admin management center?
The admin management center is where you can manage all of the admins on your account from a single view. You can add, edit, and remove admins from one streamlined experience.
Why am I seeing a different number of Invited users in my old Admin Console versus the new Admin Console?
We’ve changed how we categorize Invited users in the new Admin Console. In the old Admin Console, Invited users meant these users had a LastPass account prior to being added to the company account, and they must accept the invitation in order to join the company account. In the new Admin Console, Invited users means the user has received a notification letting them know that their company has added them to the company LastPass account.
Why am I seeing a different number of Active users in my old Admin Console versus the new Admin Console?
We’ve changed how we categorize Active users in the new Admin Console. In the old Admin Console, an Active user status meant these users were consuming a paid license. In the new Admin Console, an Active user status is tied directly to the actions the user has taken. Active users are those who have taken an action to prove they know their LastPass account exists, and they have logged in as part of the company account.
What’s the difference between Passwordless Status and Enabled Multifactor?
- Passwordless Status indicates a user’s passwordless authentication (LastPass MFA) usage. Passwordless authentication is our multifactor solution that adds an additional layer of security across single sign-on and legacy apps, VPNs, and workstations by using an employee’s stored biometrics within the LastPass MFA app.
- Enabled Multifactor refers to the multifactor option your users have enabled after entering their Master Password to access their LastPass Vault. We offer a wide range of options including the LastPass Authenticator and several other third-party multifactor options.