Configure your Organization's Login Method

Employees at your organization will log into their ClearCompany user account using the login method set by your IT Admin, usually during initial implementation. The default method applied to new client accounts relies on custom ClearCompany account credentials. Your company's preferred choice of login method can be customized at any time along with additional security measures, such enabling as two-factor authentication. Configuring or updating your login method will require assistance from the ClearCompany Support team. Read on to learn about the available login methods and related setup instructions.

In this article:
Available Login Methods
Confirm or Change your Organization's Login Method
Two Factor Authentication

Available Login Methods

ClearCompany supports several methods of user login authentication: custom ClearCompany account credentials; utilizing Single-Sign-On (SSO); or Mixed Mode Authentication (a combination of custom and SSO).

ClearCompany Credentials

When ClearCompany is set as your organization's preferred login method, User Admins will be in charge of setting usernames and employees will be responsible for setting their own account passwords. The default password policy will be strict and require the user to fulfill several criteria when setting or changing an account password. 

Single-Sign-On (SSO)

SSO allows your employees to log into ClearCompany with the same credentials they use for other business applications. This allows you to have centralized control over username and password credentials.

ClearCompany supports on-premise Active Directory Federation Services (ADFS) and a selected number of cloud-based Identity Providers via SAML Single Sign-On (SSO). The supported cloud-based providers are: AzureAD, OneLogin, Google, and Okta. Organizations using the ADP Bi-Directional Connector can alternatively set ADP as the SSO provider.

Mixed Mode Authentication

When mixed mode is enabled, the preferred login method can be set at the individual user level. This means that some employees may log in using an enabled Single-Sign-On provider, while others will enter their custom ClearCompany credentials. Mixed mode is most commonly used by organizations with contractors/consultants who only need access to ClearCompany and do not have accounts within the company's identity provider. Review this article to learn how to create a user with a ClearCompany login when mixed mode is enabled.

Confirm or Change your Organization's Login Method

Your organization's preferred login method is configured on the backend of your company's ClearCompany account. Please reach out to your ClearCompany Representative or the Support team for assistance in reviewing or changing the login method.

Two-Factor Authentication

ClearCompany user accounts support multi-factor authentication, an electronic authentication method in which a user is granted access to a site only after presenting multiple pieces of account ownership evidence. Available authentication methods include: an Authenticator App; Text Message; or Email Confirmation. 

An individual with IT Admin permission, along with your ClearCompany Representative, will enable multi-factor authentication on your account and individual users will configure their preferred authentication method. 

  Please note, ClearCompany's two-factor authentication method (2FA) cannot be enabled by organizations utilizing Single-Sign On (SSO). For these clients, it is recommended to setup a 2FA method with your SSO Identity Provider.

Enable Two-Factor Authentication for Users

Instructions

  You must have the IT Admin user permission in order to adjust Two-factor authentication settings.

1. ClearCompany Representative enables Two-Factor Authentication on your organization's system backend.

2. A user with IT Admin permission will navigate to Tools > Setup and select Configure two-factor authentication under the Organization Setup column.

   

3. Toggle On Use two-factor authentication.

   

4. Select the option to Require or Make two-factor authentication optional for your users. 

5. Check the boxes for the authentication methods users can configure as their preferred option.

   

   The Authenticator option is recommended as it is the most secure method.

6. Click Save to confirm your changes.

7. Notify your users of the account changes and instruct them to follow the steps in this article to configure their preferred Two-Factor Authentication method. Additionally, the users will automatically be prompted to set this up on their next login attempt. 

   

Edit Two-Factor Authentication Settings

Instructions

1. A user with IT Admin permission will navigate to Tools > Setup and select Configure two-factor authentication under the Organization Setup column.

   

2. Add or remove acceptable authentication methods or adjust the authentication requirement setting as needed. To disable two-factor authentication, toggle Off Use two-factor authentication.

   

3. Click Save to confirm your changes.