Clavis Single Sign-On
Clavis is the Compass SSO [single sign-on] authentication service.
Clavis allows you to use a single set of credentials to log into many of our services, including the following:
- Draw Bridge filter consoles
- Portal
- Beacon
- Vision Market.
Contact Compass Foundation to request access to Clavis SSO.
Clavis login is tied to a browser session. Once you have logged into Clavis, you can conveniently log into other Compass services with a single click.
Because of this "ease of access", added security will be required to log into Clavis. This will include the use of 2FA,2FA requiring(2-Factor aAuthentication) -- password and a key. For this key you can use a Yubikey,hardware key (eg. Yubikey), Fingerprint, or Face ID depending on what your particular device supports.
Clearing your browser cache will require you to log into the Clavis server again.
How to Register
Contact Compass Foundation to request access to Clavis SSO.
First time setup
After registration is complete:
-
Click the 'Login in with Clavis" button from one of our services login page or go to clavis.compassfoundation.io.
-
Your username will be the email address we have associated with your Clavis credentials, which will typically be the primary address associated with your Compass account.
-
You will need to set up a password by clicking the "Forgot password" button, which will send you an email with a link to set your password.
-
Open this link and enter your new password. Remember to use strong passwords!
-
Log in with this newly created password and set up your 2FA credentials.
-
Navigate to your Person record under Accounts on the left side menu. Select the
Credentials
tab in the middle of the main window. -
Add a Credential using the button in the upper left of the lower section of the main window.
-
Click
Register Hardware Key or Device
.Important Note: We recommend setting up at least two keys, to prevent
lockingaccountyourselflockoutoutinaccidentally.the event of key loss/theft. Your device may have various options for a key:YubikeyHardware security key (eg. Yubikey)- Face ID
- Fingerprint
-
Setup complete! Now when you use the Clavis login on a new browser (or if the browser cache has been
deletedcleared),andtheyousign-inare asked to log into Clavis, youprocess will firstenterrequestyouyour username andpasswordpassword, and then prompt youwill be promptedto confirm your identity with one of thecredentialskeyyouoptionshaveyou've set up.