Introduction
Two Factor Authentication (2FA) is required for all Clarity HMIS users. 2FA is a method of preventing information theft by confirming the identity of a Clarity system user. This article shows how to use 2FA in Clarity with either a smart device or email. You'll also learn where to download an authentication app. If you need help, please contact the Cincinnati/Hamilton County HMIS support team at HMISsupport@end-homelessness.org or by calling 513-263-2790.
Logging in With 2FA
When you open Clarity, you'll see the login screen:
Enter your username and password. You will then get the 2FA set up screen the first time you log in:
Choose how to authenticate your identity: an authenticator app or an email. And click next.
Note: To use an authenticator app, you will need a smart device or tablet. If you choose to get your verification code via email it will be sent to the email address associated with your Clarity account.
Installing Authentication Apps for Mobile Devices
There are several authentication applications available for mobile devices. We recommend installing the following apps for these top mobile platforms: Google Authenticator for Android and iOS and Microsoft Authenticator for Windows.
Using an Authenticator App
If you select this option and click NEXT, a dialog box will open prompting you to scan a QR code (see below). Follow the instructions from your authenticator app to scan the QR code. Once the QR code is scanned, the app will generate a 6-digit code. Enter the code in the space provided and click VERIFY CODE.
Get a Code Emailed
Selecting this option and clicking the NEXT button will send an email containing a 6-digit code to your Clarity account email address. Please note this email will come from the email address noreply@bitfocus.com and may end up in your junk folder or caught in your agency's spam filter. If you choose to use email to receive your 2FA code add "noreply@bitfocus.com" to your safe senders list.
Once you receive the email, enter the code into the dialog box and click VERIFY CODE to finish the login process.
Subsequent Logins with 2FA Enabled
As long as 2FA is enabled, you’ll be required to enter a code in order to log in (see TRUSTED DEVICE below).
· If you chose the email option, you’ll receive an email with the code.
· If you chose the app option, you’ll receive an app generated code.
Enter the code as before to complete the login process. The QR code is used to set-up 2FA so you will not be required to scan the QR code every time you need a verification code.
Trusted Device
You have the option of clicking the TRUSTED DEVICE checkbox when verifying your login code. If you click on the TRUSTED DEVICE checkbox, you will be prompted to enter a verification code after 30 days rather than at each log in.
It is our community's policy, when data is entered from a secure location within a participating agency, the user may set their browser to TRUSTED DEVICE. However, if you access Clarity in a public location (anyone working outside the office--for example, at a client's home, a library or coffee shop, or working with a client on the street) you should not click the TRUSTED DEVICE checkbox and should have 2FA enabled for each Clarity log in. You should never access Clarity from a public computer (for example, a computer provided at a library or hotel business center).
Note: If you check the TRUSTED DEVICE checkbox in one browser (IE, Firefox, Chrome, or Safari) you will still be prompted to go through the entire process if you use a different browser to log into Clarity, even if you are on the same workstation.
Contact
If you need help, or wish to offer suggestions or feedback, please contact the Cincinnati/Hamilton County HMIS support team at HMISsupport@end-homelessness.org or by calling 513-263-2790 9:00 a.m. - 3:00 p.m. Monday-Friday (excluding holidays).
When contacting HMIS Support about a particular client, please do not send personally identifiable information (PII) such as full name, social security number, or any other information used to determine a person's identity through email. Instead, please send the Clarity Unique Identifier found on the client's Clarity Profile page. You can use the messaging system in Clarity if you need to send personally-identifying information.