LastPass SSO

Setting up LastPass SSO SAML for Guru

1. First, input the following values on Guru's SSO/SCIM page:

• Identity Provider Single sign-on URL: https://identity.lastpass.com/SAML/SSOService
• Identity Provider Issuer: https://identity.lastpass.com
• X.509 Certificate: Download the certificate fingerprint in LastPass and copy it here

Turn SSO state to Enabled.

2. Next, input the following values in LastPass:

• ACS (aka Single Sign-on URL): Can be found on this page in your Guru app
• Entity ID: getguru.com/TEAMID (Your Team ID can be found on this page in your Guru app)
• Nickname: This name should match whatever you first inputted Guru as in your LastPass account, aka how it appears in your Admin console in LastPass

3. Under the Custom Attributes section in LastPass:

• Check Sign Assertion
• Select Attribute 1 as Email

4. Under the Advanced Setup section in LastPass:

• Choose Identifier as Email
• Select SAML Signature Method: SHA256

5. Click Save