ClearPoint provides several organization-level security settings that administrators can configure to manage authentication, account access, password policies, content validation, and other safeguards.
Organization Details
ClearPoint allows administrators to update basic account information.
Click Settings from the top navigation.
Choose Account Defaults.
In the Account Options tab, you can edit:
Organization Name
Displayed in the upper-left corner of ClearPoint.
Default Currency
Choose the currency used when creating new measures or series.
Prevent Users From Changing Home Page
Lock users to the default homepage defined by your account.
Lock Account
Disable login for all users.
You may add a Locked Account Message to explain the reason for downtime or planned maintenance.
Custom Logout URL
Set a URL that users will be redirected to after logging out.
This is especially helpful for SSO environments where users should return to an internal portal or custom dashboard.
Invalid Content Policy
Choose how ClearPoint responds when invalid or unsafe HTML is detected in a field:
Warn and Auto-Clean Invalid Content (default)
Additional options are available depending on your internal policy needs.
When invalid HTML is found, users may see a message such as:
“Warning: Invalid or potentially dangerous content was filtered out of this field. Please contact [email protected] for more information.”
This indicates that ClearPoint’s content protection system removed unsafe code to keep the application secure.
Login Security
The Login Security tab provides controls for password requirements, multi-factor authentication and login restrictions.
Click Settings from the top navigation.
Choose Users & Security.
In the Login Security tab, you can edit:
Password Validation Regular Expression
Defines the rule set for allowed passwords (e.g., required characters, patterns).
Password Validation Message
Text shown to users explaining password requirements on the reset/create password screen.
Require Two-Factor Authentication
Forces all users to complete two-factor authentication when logging in.
See the Help Center article on Two-Factor Authentication for more information.
Prevent Multiple Logins
Ensures only one active session per user.
If someone logs in with the same credentials, the previous session is logged out.
Expire Passwords Every 90 Days
Forces users to reset their passwords every 90 days.
Recommended for organizations with strong security compliance requirements.
Reset All Passwords
Immediately requires all users to create a new password the next time they log in.
Integrated Logins
Enable this option to allow users to sign in using supported identity providers such as Office 365 or Google Login. When enabled, users authenticate through your organization’s identity provider instead of entering a ClearPoint-specific password.
This helps centralize user authentication, strengthen login security, and streamline the login experience—especially for teams using SSO.
IP Address Restrictions
Use IP Address Restrictions to control which networks are allowed to access your ClearPoint account. You can add specific IP addresses or CIDR ranges to the IP Allow List to ensure only approved locations can log in, or add entries to the IP Block List to prevent access from known or high-risk addresses.
This option adds an additional network-level layer of protection for your account and is recommended for organizations with strict security or compliance requirements.