LastPass Capabilities
Last updated: October 8, 2024
After this article...
You'll understand the capabilities our LastPass integration provides, and how Lumos interacts with the LastPass API.
View users
The mapping between LastPass user statuses and Lumos user account statuses is below.
LastPass User Status | Lumos Account Status |
not disabled, has logged in | Active |
disabled | Suspended |
neverloggedin | Staged |
deleted (LastPass no longer returns a user) | Deprovisioned |
LastPass API endpoint: https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass/api_get_user_data.html&_LANG=enus (we derive this from the disabled and neverloggedin fields)
View a user's entitlements
Lumos can retrieve the following user entitlements from LastPass.
Role - Whether the user is a LastPass Admin.
LastPass API endpoints:
Role: https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass/api_get_user_data.html&_LANG=enus (we derive this from the admin field)
View a user's last login
In Lumos, the Last Login value represents the last time the user logged into LastPass.
LastPass API endpoint: https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass/api_get_user_data.html&_LANG=enus (we derive this from the last_login field)
Suspend a user
AppStore | Offboarding | Access Reviews | License Management |
N/A | ✅ | ✅ | ✅ |
In Lumos, suspending a LastPass user marks their Account Status as "Suspended".
In LastPass, this action deactivates the user and prevents them from logging in, but retains their data and LastPass Business membership.
This action does not reclaim a license in LastPass.
LastPass API endpoint: https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass/api_delete_user.html&_LANG=enus (we pass a deleteaction value of 0)
Deprovision a user
AppStore | Offboarding | Access Reviews | License Management |
N/A | ✅ | ✅ | ✅ |
In Lumos, deprovisioning a LastPass user marks their Account Status as "Deprovisioned".
In LastPass, this action permanently removes the user and their data from LastPass.
This action reclaims a license in LastPass.
LastPass API endpoint: https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass/api_delete_user.html&_LANG=enus (we pass a deleteaction value of 2)
Provision a user
AppStore | Offboarding | Access Reviews | License Management |
✅ | N/A | N/A | N/A |
In Lumos, provisioning a LastPass user has no impact on Lumos user data until the next LastPass user sync runs. Once the sync runs, a new user with a non-admin role will appear in the LastPass users table.
In LastPass, this action creates a non-admin user using their email, first name, and last name from Lumos and forces the user to reset their password when they first log in.
This action consumes a license in LastPass.
LastPass API endpoint: https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass/api_add_users.html&_LANG=enus (we pass a password_reset_required value of true)