Reduce password fatigue and allow users to log in to ClearPoint directly using a link inside your organization's firewall with Single Sign On (SSO).
Single Sign On (SSO) leverages your established security protocols, adding an extra layer of protection for your sensitive data in ClearPoint.
Pre-requisites
SSO is available for Enterprise Plans only.
Ping Identity
For SSO, we partner with Ping Identity which has a full support center. ClearPoint will provide the customer with a PingOne account. From here, the customer IT team can obtain a SAML standard key and configure the connection with the desired active directory service, such as ADFS or Azure AD (Step by Step Guide found at the bottom of this article).
For troubleshooting, we recommend working directly with Ping support.
Important: If additional ClearPoint support is required, it will be for an additional fee based on the amount of time it takes to support the connection.
Initial configuration
In order to begin configuring SSO, the individual responsible for completing the configuration - usually someone from the IT team - should have their email address provided to ClearPoint Support. A Ping account will then be created for them, and they will receive an email providing instructions for setup.
Click the link in the setup email to create your account. Follow the configuration steps for your desired active directory in this help deck: CPS Single Sign On with Ping – 2021.
Once configured, users in ClearPoint can be enabled for ‘Require Single Sign On (SSO) authentication.’ This means they will not be able to access ClearPoint using a ClearPoint username and password.
The SSO link created during configuration will be the only option for accessing ClearPoint.
From the Control Panel click on System Settings
Select Manage Users under Users and Groups
Click the edit Pencil icon next to the user you want to enable SSO for
Navigate to the Security tab
Mark the checkbox next to Require single sign on (SSO) authentication
Once you are done, click Save
Configuring MFA with SSO
To set up both Single Sign On (SSO) and Multi-Factor Authentication (MFA) for ClearPoint, MFA must be configured through the SSO provider. This ensures that the added security layer of MFA is managed by your established SSO protocols. Please consult your SSO provider's documentation for detailed instructions on setting up MFA.