Every implementation of LastPass is different based on your unique environment and program goals. The following is meant to serve as a high level guide with just some of the features and options you might consider when implementing LastPass Enterprise.
Phase I: Proof of Concept
- Follow the prompts and submit LastPass Trial Request Form to initiate a free, 14-day trial including up to 10 staff members.
- Weigh provisioning options and software installation options, and determine best path for your enterprise.
- Review the policy options and determine relevance for your enterprise.
- Create at least 5 beta test accounts from the 'create new users' tab of the Admin Console.
- Populate the beta accounts with top sites and applications utilized by your employees. Test all logins to make sure that they are functioning seamlessly.
- Determine who will need Admin rights within your enterprise and assign them from the Users tab of the Admin Console. Conduct Admin training as necessary.
- Determine if cloud-based Single Sign-on (using SAML) is needed/wanted. Advise your LastPass representative if support is needed for any new applications not already available. Integrate and test the desired applications.
- For larger implementations, consider training one or more internal helpdesk contact(s) for end user support.
- For larger implementations, determine how much education/tutorials you intend to push out to your staff. Most enterprises send only the welcome email.
- For larger implementations, consider customizing the welcome email to include internal helpdesk contact.
- Review the automated user notification options found here. These notifications are very important for driving adoption and for optimizing employee use of the service to improve the safety or your corporate data.
Phase II: Enterprise-wide Roll Out
- For larger implementations, download the software to all work stations.
- Purchase your LastPass licenses.
- Provision all users, or provision in batches, per your preference. If using the Sync Client with ‘pending users’ configuration, then go to the ‘pending users’ page to ‘accept’ all users for whom you would like accounts to be provisioned.
- Determine if any new users should be granted LastPass Admin rights. If so, assign them from the Users tab of the Admin Console. Conduct Admin training as necessary.
- Create User Groups to help facilitate the assignment of policies and/or Shared Folders.
- If using cloud-based Single Sign-on (using SAML), activate the desired groups/apps.
- If sharing credentials is desired then have each divisional manager consider their shared folder structure – (1) one universal folder or multiple, (2) who will have admin versus standard access and hidden/visible, (3) what sites/secure notes will be shared. Create shared folders and populate with desired sites. (Folders can be created at any point in time).
- Owners assign Shared Folders to the appropriate users/groups.
- Report any bugs or enhancement requests to LastPass using the ticket system.