Authentication – Configuring SSO with ClearPoint

Learn how to configure Single Sign-On (SSO) for ClearPoint using Integrated Logins or PingOne SAML integration.

Fernando Montenegro
8 steps
35 seconds

Clearpointstrategy

Single Sign-On (SSO) allows users to securely access ClearPoint using their organization’s existing authentication system. SSO enhances security, simplifies login management, and reduces password fatigue across your organization. ClearPoint offers two SSO options—**Integrated Logins with Office 365 or Google** and **PingOne (Custom SAML Integration)**—to meet varying security and IT infrastructure needs.

Overview of SSO Options

## 1. Integrated Logins with Office 365 or Google This option enables users to sign in using the **Office 365** or **Google** buttons on the ClearPoint login page. - **Setup:** Enable integrated logins in **System Setup > Authentication Settings**. - **User Management:** Managed within ClearPoint (not through Microsoft or Google admin portals). - **Advantages:** - Fast configuration - Seamless login experience - Minimal IT maintenance *See our article: Authentication – [Enabling Integrated Logins](https://next-support.clearpointstrategy.com/en/articles/13000009-authentication-enabling-integrated-logins)*

2. PingOne (Custom SAML Integration)

PingOne provides advanced SAML-based authentication for organizations needing deeper directory integration and security controls. - **Available For:** Enterprise Plans only - **Setup:** ClearPoint partners with **Ping Identity** to configure a secure, SAML-based connection with your chosen directory service (e.g., Azure AD, ADFS). - **User Management:** Controlled at both ClearPoint and directory levels. - **Advantages:** - Supports custom SSO URLs - Provides enterprise-grade access control - Integrates with MFA and directory group policies 💡 *Ideal for organizations requiring detailed administrative configuration and centralized identity management.*

Setting Up PingOne SSO

Step 1: Request Configuration Access

1. Contact **ClearPoint Support** at *support@clearpointstrategy.com* with the name and email address of the IT administrator who will complete the setup. 2. ClearPoint will create a **PingOne account** for your organization and send setup instructions.

Step 2: Configure PingOne

1. Follow the setup link in the invitation email to log in to your PingOne account. 2. Use the guide **“CPS Single Sign On with Ping – 2021”** or **PingOne to Azure SSO Setup (PDF)** for step-by-step configuration. 3. Once setup is complete, PingOne will generate your **SAML standard key** and **SSO URL**. 4. Provide this SSO URL to your users—it will become the only access method for accounts that require SSO authentication. 📘 *Ping Identity’s Support Center provides full documentation for troubleshooting or integration assistance.*

Step 3: Enable SSO for ClearPoint Users

1. Go to **System Setup.** 2. Locate **Users & Security**. 3. Navigate to the **Users tab**. 4. Click the kebab menu (⋮) and select **Edit User** 5. Go to the **Security** tab. 6. Check **Require Single Sign-On (SSO) authentication**. 7. Click **Save**.

🔒 Once enabled, the user can only log in via your organization’s SSO link—not with ClearPoint username and password credentials.

Configuring Multi-Factor Authentication (MFA) with SSO

If you’d like to enable **MFA** alongside SSO: - MFA must be configured **within your SSO provider** (e.g., Microsoft Entra, Google, or PingOne). - ClearPoint defers MFA management to the identity provider to maintain centralized authentication control. - Refer to your SSO provider’s documentation for MFA configuration details.