Identity authentication
Google Sign-In provides the basic identity information needed for authentication, principally the user's email address and basic Google account identity/profile information provided through Google OpenID Connect.
Client Portal
Secure access forauthorized Stone Fortressclients.
The Stone Fortress Client Portal provides authorized clients with secure access to selected household financial reporting and related client information.
Authorized client access
Identity first. Authorization second.
Portal access is limited to specifically authorized users. Google Sign-In is used only to authenticate the user's identity.
After authentication, the portal uses the email address associated with the authenticated Google account to determine whether that user is authorized for the applicable household portal.
Limited access
Successful Google authentication does not by itself grant access. Stone Fortress authorization rules determine whether the authenticated user may enter a particular household portal.
How Google Sign-In is used
Authentication without access to Google account content.
The Client Portal uses Google Sign-In to confirm identity. It does not request access to the content of the user's Google services.
Stone Fortress authorization
The authenticated Google account email address is compared with the authorized-email list for the applicable household portal before access to household information is permitted.
Google account content
What the Client Portal does not request or access.
The Client Portal does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or similar Google account content.
Google Sign-In is used for authentication only, not to read or retrieve content from those Google services.
Gmail
No Gmail messages or mailbox content are requested or accessed.
Drive, Calendar, and Contacts
Google Drive files, Calendar information, Contacts, and similar Google account content are not requested or accessed.
Authentication purpose
Google identity information is used to verify identity and support the portal authorization check.
Client Portal privacy information
Review the Client Portal Privacy page for the privacy disclosure specific to Google Sign-In and portal authentication. For broader firm terms and regulatory information, see Disclosures.