Understanding Security Options in ClearPoint

This article explains the security options offered by ClearPoint.

Fernando Montenegro
7 steps
14 seconds

Clearpointstrategy

ClearPoint provides several organization-level security settings that administrators can configure to manage authentication, account access, password policies, content validation, and other safeguards.

Organization Details

ClearPoint allows administrators to update basic account information. 1. Click **Settings** from the top navigation. 2. Choose **Account Defaults**.

1. In the **Account Options** tab, you can edit:

## **Organization Name** Displayed in the upper-left corner of ClearPoint. ## **Default Currency** Choose the currency used when creating new measures or series. ## **Prevent Users From Changing Home Page** Lock users to the default homepage defined by your account. ## **Lock Account** Disable login for all users.\ You may add a **Locked Account Message** to explain the reason for downtime or planned maintenance. ## **Custom Logout URL** Set a URL that users will be redirected to after logging out.\ This is especially helpful for SSO environments where users should return to an internal portal or custom dashboard. ## **Invalid Content Policy** Choose how ClearPoint responds when invalid or unsafe HTML is detected in a field: - **Warn and Auto-Clean Invalid Content** (default) - Additional options are available depending on your internal policy needs. When invalid HTML is found, users may see a message such as: *“Warning: Invalid or potentially dangerous content was filtered out of this field. Please contact support@clearpointstrategy.com for more information.”* This indicates that ClearPoint’s content protection system removed unsafe code to keep the application secure.

Security

The **Security** tab provides controls for password requirements, multi-factor authentication and login restrictions. 1. Click **Settings** from the top navigation. 2. Choose **Users & Security**.

1. In the **Login Security** tab, you can edit:

## **Password Validation Regular Expression** Defines the rule set for allowed passwords (e.g., required characters, patterns). ## **Password Validation Message** Text shown to users explaining password requirements on the reset/create password screen. ## **Require Two-Factor Authentication** Forces all users to complete two-factor authentication when logging in.\ See the Help Center article on Two-Factor Authentication for more information. ## **Prevent Multiple Logins** Ensures only one active session per user.\ If someone logs in with the same credentials, the previous session is logged out. ## **Expire Passwords Every 90 Days** Forces users to reset their passwords every 90 days.\ Recommended for organizations with strong security compliance requirements. ## **Reset All Passwords** Immediately requires all users to create a new password the next time they log in. ### **Integrated Logins** Enable this option to allow users to sign in using supported identity providers such as **Office 365** or **Google Login**. When enabled, users authenticate through your organization’s identity provider instead of entering a ClearPoint-specific password. This helps centralize user authentication, strengthen login security, and streamline the login experience—especially for teams using SSO. ## **IP Address Restrictions** Use IP Address Restrictions to control which networks are allowed to access your ClearPoint account. You can add specific IP addresses or CIDR ranges to the **IP Allow List** to ensure only approved locations can log in, or add entries to the **IP Block List** to prevent access from known or high-risk addresses. This option adds an additional network-level layer of protection for your account and is recommended for organizations with strict security or compliance requirements.