Skip to main content

Set up your IdP to support imports from LastPass with SSO authentication

This article describes how to set up your IdP to support item imports from LastPass for users who authenticate with SSO.

Cerby Team avatar
Written by Cerby Team
Updated over 2 weeks ago

Who can use this feature?

  • Workspace Owners, Super Admins, and Admins

  • Only supported using the Cerby web app

As a workspace Owner, Super Admin, or Admin, you can enable migrations from LastPass to Cerby for users who authenticate with single sign-on (SSO). You must set up your identity provider (IdP), such as Okta or Entra ID (formerly Azure AD), to support this login method.

IMPORTANT: Currently, SSO authentication is only supported using the Cerby browser extension in Chrome and Edge. Therefore, you only perform the setup for these client apps, which must be installed on the end user’s computers.

To set up your IdP, you must complete the following steps in your corresponding tenant:

  • Okta

    1. Follow the instructions in the article Create OIDC app integrations to add or edit the Sign-in redirect URIs value for the LastPass application.

    2. Enter the following value as the sign-in redirect URI:

      • chrome-extension://clccplmaaeihbagbefjinmclielobnkb/lastpass-sso-callback.html for Chrome

      • chrome-extension://bbaiiaogfdgpbapebajffliefkfipoif/lastpass-sso-callback.html for Edge

  • Entra ID

    1. Follow the instructions in the article Quickstart: Register an application with the Microsoft identity platform to add a redirect URI for the LastPass app.

    2. Enter the following value as the redirect URI:

      • chrome-extension://clccplmaaeihbagbefjinmclielobnkb/lastpass-sso-callback.html for Chrome

      • chrome-extension://bbaiiaogfdgpbapebajffliefkfipoif/lastpass-sso-callback.html for Edge

  • Google Workspace

    1. Follow the instructions in the article Setting up OAuth 2.0, topic Web applications, to specify an authorized redirect URI for the LastPass entry. The setup is in the Credentials page of the Google Cloud Console.

    2. Enter the following value as the redirect URI:

      • chrome-extension://clccplmaaeihbagbefjinmclielobnkb/lastpass-sso-callback.html for Chrome

      • chrome-extension://bbaiiaogfdgpbapebajffliefkfipoif/lastpass-sso-callback.html for Edge

Now you are done. All workspace users can now import their items from LastPass to Cerby if they log in to LastPass with SSO authentication.

Did this answer your question?