LastPass

aid: lastpass
url: https://raw.githubusercontent.com/api-evangelist/lastpass/refs/heads/main/apis.yml
name: LastPass
kind: company
description: LastPass is a password and identity-management platform offering personal and enterprise vaults, single sign-on,
  multi-factor authentication, and directory provisioning. The LastPass Enterprise API and Provisioning API let admins programmatically
  manage users, groups, shared folders, policies, and events. SCIM and SAML endpoints integrate with identity providers; an
  MFA SDK supports adaptive authentication for custom apps.
accessModel:
  pricing: freemium
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Freemium
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/lastpass.png
tags:
- Security
- Password Manager
- Vault
- Identity
- Enterprise
- SSO
- MFA
created: '2026-05-08'
modified: '2026-05-08'
specificationVersion: '0.19'
apis:
- aid: lastpass:enterprise-api
  name: LastPass Enterprise API
  description: Single POST endpoint at lastpass.com/enterpriseapi.php that accepts a JSON payload selecting one of many command
    names (batchadd, batchchange, deluser, disableuser, getuserdata, getsfdata, getreport, etc.). Authenticated with the enterprise
    customer ID (cid) and provisioning hash (provhash). Used for user provisioning, group management, shared-folder reporting,
    and audit-event export.
  humanURL: https://support.lastpass.com/help/use-the-lastpass-enterprise-api
  baseURL: https://lastpass.com/enterpriseapi.php
  tags:
  - Enterprise API
  - Provisioning
  - Reporting
  properties:
  - type: Documentation
    url: https://support.lastpass.com/help/use-the-lastpass-enterprise-api
- aid: lastpass:provisioning
  name: LastPass Provisioning API
  description: Subset of the Enterprise API focused on the user-lifecycle commands - batchadd, batchchange, deluser, disableuser,
    and getuserdata - used by directory connectors (Active Directory, Entra ID, Okta, Google Workspace) to keep LastPass user
    state aligned with the source-of-truth directory.
  humanURL: https://support.lastpass.com/help/lastpass-provisioning-api
  baseURL: https://lastpass.com/enterpriseapi.php
  tags:
  - Provisioning
  - Directory Sync
  properties:
  - type: Documentation
    url: https://support.lastpass.com/help/lastpass-provisioning-api
- aid: lastpass:scim
  name: LastPass SCIM API
  description: SCIM 2.0 endpoint that exposes Users and Groups for directory-based provisioning by Okta, Entra ID, OneLogin,
    JumpCloud, and Google Cloud Identity. Replaces ad-hoc provisioning calls with a standards-compliant flow.
  humanURL: https://support.lastpass.com/help/lastpass-scim-provisioning
  baseURL: https://scim.lastpass.com/scim/v2
  tags:
  - SCIM
  - Provisioning
  - Identity
  properties:
  - type: Documentation
    url: https://support.lastpass.com/help/lastpass-scim-provisioning
- aid: lastpass:saml
  name: LastPass SAML / SSO Endpoint
  description: LastPass acts as either a SAML identity provider (IdP) for the cloud apps catalogued in the LastPass App Library
    or as a service provider (SP) when paired with an external IdP. Endpoints implement SAML 2.0 SSO, single logout, and metadata
    exchange.
  humanURL: https://support.lastpass.com/help/sso-with-lastpass
  baseURL: https://identity.lastpass.com/saml
  tags:
  - SAML
  - SSO
  - Identity
  properties:
  - type: Documentation
    url: https://support.lastpass.com/help/sso-with-lastpass
- aid: lastpass:mfa-sdk
  name: LastPass MFA SDK
  description: Server-side SDK for embedding LastPass MFA (push, biometric, TOTP) into custom cloud or on-prem applications.
    Wraps the underlying authentication endpoints so developers can add adaptive multi-factor authentication without standing
    up an OIDC layer.
  humanURL: https://support.lastpass.com/help/lastpass-mfa-sdk
  baseURL: https://identity.lastpass.com
  tags:
  - MFA
  - SDK
  - Authentication
  properties:
  - type: Documentation
    url: https://support.lastpass.com/help/lastpass-mfa-sdk
- aid: lastpass:reporting
  name: LastPass Reporting Commands
  description: Reporting-oriented Enterprise API commands (getreport, getuserdata, getsfdata, getevents) that export login
    activity, shared-folder membership, and admin events for use in SIEMs and audit pipelines.
  humanURL: https://support.lastpass.com/help/use-the-lastpass-enterprise-api
  baseURL: https://lastpass.com/enterpriseapi.php
  tags:
  - Reporting
  - Audit Logs
  - Compliance
  properties:
  - type: Documentation
    url: https://support.lastpass.com/help/use-the-lastpass-enterprise-api
common:
- type: DomainSecurity
  url: security/lastpass-domain-security.yml
- type: GitHubOrganization
  url: https://github.com/lastpass
- type: LinkedIn
  url: https://www.linkedin.com/company/lastpass
- type: Website
  url: https://www.lastpass.com/
- type: Documentation
  url: https://support.lastpass.com/help/use-the-lastpass-enterprise-api
- type: Plans
  url: plans/lastpass-plans-pricing.yml
- type: RateLimits
  url: rate-limits/lastpass-rate-limits.yml
- type: FinOps
  url: finops/lastpass-finops.yml
- type: Blog
  url: https://blog.lastpass.com/
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com