Log in through the extension

LastPass is best experienced through your browser extension. Install LastPass for Firefox to automatically login to sites as you browse the web.

Install LastPass Close
img_logo_microsoft-active-directory-svg

directory integration

LastPass and Microsoft Active Directory

Integrate your Microsoft Active Directory (AD) with LastPass to enhance security compliance and simplify employee access.

img_microsoft-ad-video-active-directory-png

By establishing a directory integration between LastPass Business and Microsoft Active Directory, you can automate and scale password management so your employees don’t have to remember and manage any additional passwords.

Cloud-based federation enhances security compliance and improves user convenience even further. Once federated, employees can log into LastPass using just their Active Directory credentials.

Using the Active Directory integration service, you can:

  • Automate identity management and onboarding through real-time provisioning and deprovisioning of LastPass user accounts. Sync user groups to LastPass for policy designations, shared folders, and SAML application assignments.
  • Boost productivity and simplify employee access with federated login, which allows users to access their LastPass vault using just their directory credentials – no Master Password required.
  • Automatically provision employees with a LastPass Business account when users are added to your Active Directory – no local provisioning necessary.
  • Safeguard every entry point to your business, including apps and sites already covered by Active Directory SSO, those that aren’t, and those your IT team isn’t even aware of.
  • Your sensitive data is never shared with anyone but authenticated users thanks to LastPass zero-knowledge security model and industry-best vault encryption.

How do I connect Active Directory to my LastPass Business account?

Active Directory connector FAQs

How do I set up federated login?

LastPass supports integration with all major identity providers

img_icon_illustrative_brand-windows-final-svg

Microsoft™ Active Directory

A configurable, lightweight client that syncs user profiles from your on-premise AD.

img_icon_illustrative_brand-azure-svg

Microsoft™ Azure AD

Through a SCIM API, our Azure AD endpoint syncs user profiles from your consolidated cloud directory.

img_icon_illustrative_brand-google-final-svg

Google Workspace

Automate and scale password management, while saving time for IT, with Google Directory Integration.

img_icon_illustrative_brand-okta-final-svg

Okta

Automatically provision and deprovision from your single sign-on provider through a SCIM API.

img_icon_illustrative_brand-pingfederate-svg

PingOne/PingFederate

Manage and provision both users and groups by establishing integration with PingOne or Ping Federate.

img_icon_illustrative_brand-onelogin-final-svg

OneLogin

Manage onboarding, offboarding, and group assignments by utilizing a SCIM API for your OneLogin directory.

img_icon_illustrative_brand-lastpass-final-svg

Custom API

Larger enterprises with complex onboarding needs can take advantage of our flexible, powerful API.

Explore other LastPass features

icon_illustrative_cloud-sso-2-svg

Federated login

With federated login, employees can access their LastPass vault using just their directory credentials.

Explore Federated Login
img_icon_illustrative_access-all-devices-sso-svg

Single sign-on

Reduce the number of passwords you need to remember by using LastPass single sign-on (SSO).

Learn More about SSO
img_icon_illustrative_biometric-authentication-fingerprint-svg

Passwordless access

Simplify your employees’ login experience by removing password-related friction.

Explore Passwordless
icon_illustrative_settings-controls-customization-svg

Admin Controls

Manage directory integration, users, policies, reporting, and more from a single admin dashboard.

Explore Admin Controls

Simplify access to LastPass with Microsoft Active Directory and federated login

14-days free LastPass Business trial. No credit card required.