Authentication - Configuring SSO with ClearPoint

Single Sing On (SSO) is available for [Enterprise Plans](https://www.clearpointstrategy.com/pricing) only.

For SSO, we partner with Ping Identity which has a full [support center](https://support.pingidentity.com/s/). ClearPoint will provide the customer with a PingOne account. From here, the customer IT team can obtain a SAML standard key and configure the connection with the desired active directory service, such as ADFS or [Azure AD](https://docs.pingidentity.com/bundle/pingoneforenterprise/page/gku1564020479740.html). For troubleshooting, we recommend working directly with Ping support. Important: If additional ClearPoint support is required, it will be for an additional fee based on the amount of time it takes to support the connection.

In order to begin configuring SSO, the individual responsible for completing the configuration - usually someone from the IT team - should have their email address provided to ClearPoint Support. A Ping account will then be created for them, and they will receive an email providing instructions for setup. Click the link in the setup email to create your account. Follow the configuration steps for your desired active directory in this help deck: [CPS Single Sign On with Ping – 2021](https://www.clearpointstrategy.com/wp-content/uploads/2019/05/CPS-Single-Sign-On-with-Ping-2021.pdf). Once configured, users in ClearPoint can be enabled for ‘Require Single Sign On (SSO) authentication.’ This means they will not be able to access ClearPoint using a ClearPoint username and password. The SSO link created during configuration will be the only option for accessing ClearPoint.