LastPass federated login integration with Shibboleth IdP

[Cantor, Scott]

> Has anyone successfully integrated Shibboleth IdP with LastPass, SAML or OIDC? 

I haven't been asked, but I've generally been reluctant to warm up to the idea of the IdP being able to get into a password vault, that crosses a line I think. As an IdP operator, I'd be pretty concerned about it because of the personal credentials that would be there.

With PAM, I'm not thrilled about it but less opposed on the basis that it should be clear to everybody that's not a personal vault, strictly enterprise service accounts. Still not great.

-- Scott