Skip to main content

Cloud ConnectorsExabeam Cloud Connectors Configuration Guide

Table of Contents

LastPass Enterprise Cloud Connector

LastPass enterprise provides centralized secure access through Single Sign On (SSO), and a password manager that protects each access point. LastPass automates IT processes and provides directory integrations, admin controls, integrated access, encrypted password sharing, two-factor authentication, encryption at device level, and secure vault for each user to access tools. For more information see the LastPass documentation.

Prerequisites to Configure the LastPass Connector

Before you configure the LastPass connector you must complete the following prerequisites:

  • Obtain the LastPass provisioning hash also known as API secret

  • Obtain the LastPass company ID (CID) also known as tenant ID

Obtain LastPass Provisioning Hash and CID

LastPass APIs are authenticated via a unique key called a provisioning hash. Contact the LastPass administrator to obtain the values for the provisioning hash and CID. If the administrator does not have the previously-generated required values, you must generate a provisioning hash to use while configuring the LastPass connector.

To create a provisioning hash:

  1. Log in to LastPass Enterprise admin console as an administrator.

  2. Navigate to Advanced Options > Enterprise API.

  3. On the Enterprise API page, in the Authentication Parameters section note the value for CID.

  4. Click Reset Your Provisioning Hash.

    Note

    Clicking Reset Your Provisioning Hash resets the previous API key and disconnects existing API clients. Make sure that you reset the value only if required.

    Note the value for Provisioning Hash.

  5. In the confirmation box, click OK.

    Copy the values to use for authorizing the API calls. Use these values, represented by a string of letters and numbers, to configure the LastPass cloud connector.

Configure the LastPass Connector

LastPass enterprise provides centralized secure access through Single Sign On (SSO), and a password manager that protects each access point. LastPass automates IT processes and provides directory integrations, admin controls, integrated access, encrypted password sharing, two-factor authentication, encryption at device level, and secure vault for each user to access tools. For more information see the LastPass documentation.

The following table displays audit source API and security events supported by the connector.

Audit Source: API

Service or Module Covered

Event Included

Reports Events

Any

All

Table 17. Audit source API and security events supported by the connector


To configure the LastPass connector to import data into the Exabeam Cloud Connector platform:

  1. Complete the Prerequisites to Configure the LastPass Connector.

  2. Log in to the Exabeam Cloud Connectors platform with your registered credentials.

  3. Navigate to Settings > Accounts > Add Account.

  4. Click Select Service to Add, then select LastPass from the list.

  5. In the Accounts section, enter the required information. Required fields are indicated with a red bar.

    1. Tenant – Select a tenant to attach to the connector if you are using a multi-tenant edition of Exabeam. Otherwise, select default.

    2. Account Name – Specify a name for the LastPass connector. For example, LastPass SSO.

    3. Description – (Optional) Describe the LastPass connector. For example, LastPass password management and secure vault service.

    4. CID – Enter the value for CID that you obtained while completing prerequisites.

    5. Provisioning Hash – Enter the value for provisioning hash that you obtained while completing the prerequisite steps.

    6. Apiuser – (Optional) Enter the name of the API user to identify who is using the API in logs. If you do not specify a value, the field is set to default value of ExabeamCloudConnectors.

    7. API Timezone – Enter the timezone of your lastpass account in which you want to log the API.

  6. To confirm that the Exabeam Cloud Connector platform communicates with the service, click Test Connection.

  7. Click Done to save your changes. The cloud connector is now set up on the Exabeam Cloud Connector platform.

  8. To ensure that the connector is ready to send and collect data, Start the connector and check that the status shows OK.