Single Sign-On (SSO) allows users to securely access ClearPoint using their organization’s existing authentication system. SSO enhances security, simplifies login management, and reduces password fatigue across your organization.
ClearPoint offers two SSO options—Integrated Logins with Office 365 or Google and PingOne (Custom SAML Integration)—to meet varying security and IT infrastructure needs.
Overview of SSO Options
1. Integrated Logins with Office 365 or Google
This option enables users to sign in using the Office 365 or Google buttons on the ClearPoint login page.
Setup: Enable integrated logins in System Setup > Authentication Settings.
User Management: Managed within ClearPoint (not through Microsoft or Google admin portals).
Advantages:
Fast configuration
Seamless login experience
Minimal IT maintenance
See our article: Authentication – Enabling Integrated Logins
2. PingOne (Custom SAML Integration)
PingOne provides advanced SAML-based authentication for organizations needing deeper directory integration and security controls.
Available For: Enterprise Plans only
Setup: ClearPoint partners with Ping Identity to configure a secure, SAML-based connection with your chosen directory service (e.g., Azure AD, ADFS).
User Management: Controlled at both ClearPoint and directory levels.
Advantages:
Supports custom SSO URLs
Provides enterprise-grade access control
Integrates with MFA and directory group policies
💡 Ideal for organizations requiring detailed administrative configuration and centralized identity management.
Setting Up PingOne SSO
Step 1: Request Configuration Access
Contact ClearPoint Support at [email protected] with the name and email address of the IT administrator who will complete the setup.
ClearPoint will create a PingOne account for your organization and send setup instructions.
Step 2: Configure PingOne
Follow the setup link in the invitation email to log in to your PingOne account.
Use the guide “CPS Single Sign On with Ping – 2021” or PingOne to Azure SSO Setup (PDF) for step-by-step configuration.
Once setup is complete, PingOne will generate your SAML standard key and SSO URL.
Provide this SSO URL to your users—it will become the only access method for accounts that require SSO authentication.
📘 Ping Identity’s Support Center provides full documentation for troubleshooting or integration assistance.
Step 3: Enable SSO for ClearPoint Users
Go to System Setup.
Locate Users & Security.
Navigate to the Users tab.
Click the kebab menu (⋮) and select Edit User
Go to the Security tab.
Check Require Single Sign-On (SSO) authentication.
Click Save.
🔒 Once enabled, the user can only log in via your organization’s SSO link—not with ClearPoint username and password credentials.
Configuring Multi-Factor Authentication (MFA) with SSO
If you’d like to enable MFA alongside SSO:
MFA must be configured within your SSO provider (e.g., Microsoft Entra, Google, or PingOne).
ClearPoint defers MFA management to the identity provider to maintain centralized authentication control.
Refer to your SSO provider’s documentation for MFA configuration details.