Blog
Recent
Product Updates

LastPass and Google Workspace: Added Security, Simplified Access 

Molly AldrichDecember 09, 2021
LastPass can now be integrated with Google Workspace! LastPass’s directory integration and federation services now integrate with Google, simplifying provisioning and de-provisioning of users and ultimately removing a user’s need for a master password to log into their vault. Once your Google Directory is integrated with LastPass, you can federate to enable a seamless login experience that provides users access to LastPass using their corporate Google credentials. LastPass already has Federated Login integrations with Microsoft Active Directory Federated Services (ADFS), Azure AD, and Okta. Google Workspace is our fourth identity provider. Let’s take a closer look at the benefits of Federated Login and how you can integrate your source of truth and simplify access with Google Workspace.

How can your business benefit from Federated Login?

Additional security without complexity:  Utilize LastPass’ unique and enhanced federation model to ensure best-in-class security with zero-knowledge infrastructure. Simplify user access: Alleviate login frustrations and easily connect employees to their work, all while leveraging technology and solutions you’ve already implemented at your business. Eliminate additional passwords: Employees only need one password to unlock work – their Google Workspace login. Simplify access and boost productivity by providing a passwordless experience. Increase adoption: Eliminating the enrollment process and the need for a master password provides employees an immediate access to the credentials they need to do their work, removing login frustrations. Automate identity management: Save time and resources while scaling password management across your organization, by automating provisioning between your identity provider and LastPass. Easily ensure no data leaves your business when employees do. Set-up and secure: Sync your directory and complete a one-time, native federation configuration, providing your users with simplified access to their most-used tools without compromising on security.

An unmatched security model

In contrast with competitor approaches, LastPass has an improved method for providing federated login to a user’s vault. With a zero-knowledge infrastructure and proprietary multi-key master password model, LastPass’s unique cloud-based Federated Login adds additional layers of security, without adding complexity for your end-users. Rest assured that data security is not compromised at the hands of employee convenience. A zero-knowledge infrastructure means that neither party (LastPass nor Google Workspace) possesses enough information to be able to access a user's vault – ever. Instead, LastPass generates a master password for a federated user, divides it into multiple parts and stores the parts in separate locations. After successful authentication with your IDP, a user's local device receives the password parts and combines them to recreate the master password. The local device applies the master password to decrypt the user’s vault. Other than the user’s local device, no single component has all the necessary information to recreate the master password, thereby preserving zero-knowledge infrastructure during the entire authentication process. Moreover, the separate password parts alone are insufficient for unlocking the vault, significantly improving security, and decreasing risk of breaches and hacks.

LastPass Federated Login with Google Workspace

Configure LastPass Business with Google to automate and scale password management while IT saves time – all without adding another password for employees to remember and manage. To learn more about the Google Workspace integration, click here.