LastPass Connector

LastPass is a popular password manager that allows users to securely store, generate, and manage their passwords. Here are its main features:

1. Secure storage: LastPass encrypts and stores all your passwords in a personal virtual vault, accessible only with a master password.
2. Password generation: It offers an integrated generator to create strong and random passwords.
3. Multi-platform synchronization: LastPass works on various browsers and operating systems, allowing easy synchronization between devices.
4. Automatic completion: The browser extension and mobile applications allow automatic completion of login credentials.
5. Additional features: LastPass offers multi-factor authentication options, secure password sharing, and data breach monitoring for premium accounts.

The LastPass connector automatically imports users from your LastPass environment into Youzer, giving you centralized visibility of accounts with access to your password manager. This is a read-only connector, which does not currently create, modify or delete accounts in LastPass. Each time LastPass is synchronized, the following information is retrieved:

• username LastPass login
• fullname user's full name
• admin administrator status (true/false)
• groups groups to which the user belongs, imported as a list

This data makes it easier to track the distribution of roles and memberships within LastPass, while also facilitating security audits and compliance analyses.

The connector authenticates to the LastPass API using two elements:

• a login, which corresponds to a hash
• a password, designated as cid

Once this information has been configured in Youzer, the connector regularly queries the LastPass API to obtain the list of users. Each user is then enriched with attributes (name, identifier, admin status, groups) and integrated into the Youzer repository. Groups are also used as distinct values in the attributes, enabling them to be filtered or analyzed in other processes (reporting, mapping, etc.).