Ping Identity is one of the most popular Identity and access management (IAM) solutions within the identity and access management (IAM) domain, with a wide array of features aimed at securing user access and strengthening overall security posture.
This review provides a detailed dive into Ping Identity's capabilities, pricing, strengths, and limitations, aiming to help you with the essential insight needed to see if it’s the right fit for your company.
What is Ping Identity?
Founded in 2002, Ping Identity is a company that provides identity and access management (IAM) solutions.
Operated from Denver, Colorado, their Ping Identity platform is designed to secure access to applications, APIs, and data for both employees and customers.
Ping Identity emphasizes secure, seamless user experiences and comprehensive identity security. The company has a range of products that cover various aspects of IAM and CIAM, including single sign-on (SSO), multi-factor authentication (MFA), access management, and identity verification.
Key Features of Ping Identity
Ping Identity's platform offers a suite of features designed to address diverse IAM needs:
- Single Sign-On (SSO): Ping Identity's SSO capabilities allow users to access multiple applications with a single set of credentials. This feature enhances user productivity and reduces password fatigue.
- Multi-Factor Authentication (MFA): Ping Identity provides multi-factor authentication (MFA) to add an extra layer of security to the authentication process. This can involve various authentication methods, such as one-time passwords, biometrics, and push notifications.
- Access Management: Ping Identity enables organizations to control user access to applications and resources based on defined policies. This includes features like fine-grained authorization and contextual access management.
- Identity Verification: Ping Identity offers solutions for verifying user identities, which is crucial for secure customer onboarding and fraud prevention.
- API Security: Ping Identity helps organizations secure their APIs, ensuring that only authorized users and applications can access sensitive data and functionality.
- Directory Services: Ping Identity provides directory services for managing user identities and profiles. This can include integration with existing directories or cloud-based directory solutions.
- Identity Governance: Ping Identity includes features for identity governance, enabling companies to manage user lifecycle, access certifications, and audit logging.
Ping Identity Pricing
Ping Identity's pricing model is generally enterprise-focused and can vary significantly based on the specific products, features, and the number of users. It's common for Ping Identity to offer custom pricing based on an organization's specific requirements.
However, it’s important to note that on the lower side of its pricing, it typically starts at $13,000 annually for an enterprise, but can go up to as much as $650,000, which is definitely not on the cheaper side.
Ping Identity Features
Ping Identity's platform offers a suite of features designed to address diverse IAM needs:
Ping Identity Usability and Interface
The usability and interface of Ping Identity's solutions can be a mixed bag, according to user feedback.
Administrative Console
Ping Identity's administrative console is powerful and provides extensive control over IAM functions.
However, some users find it complex and require significant training to master. The depth of features, while advantageous for customization, can contribute to a steeper learning curve.
That said, many IT teams appreciate how Ping handles complex identity needs without overcomplicating the user experience.
User Onboarding
Ping Identity offers tools to automate user onboarding and provisioning, which can streamline the process. However, the complexity of configuring these tools can vary depending on the specific environment and integrations.
- Some users report that initial setup can be time-consuming, especially when working across multiple identity providers or custom applications.
- A few reviews mention lag in mobile push notifications or needing additional support for fine-tuning session timeouts and user mapping.
User Experience
The end-user experience with Ping Identity's SSO and MFA solutions is generally positive, with seamless access to applications and secure authentication. Ping Identity emphasizes a balance between security and user convenience.
End users, on the other hand, enjoy the "one click and done" login process, often via biometrics or push notifications on their phones.
Ping Identity Mobile App
Ping Identity offers mobile authentication capabilities, enabling users to authenticate via their mobile devices.
- Security: The mobile app typically supports strong authentication methods, such as push notifications, biometrics, and one-time passcodes, enhancing security for mobile access.
- Functionality: The mobile app allows users to approve login requests, access applications, and manage their authentication settings.
- Usability: User feedback on the Ping Identity mobile app varies. Some users find it convenient and easy to use, while others may experience issues with specific features or compatibility.
Single Sign-On (SSO)
Ping Identity's Single Sign-On (SSO) solutions are highly regarded for their robust security and user-friendly experience.
- Users appreciate the seamless integration with various applications, including SaaS and cloud platforms, and the flexibility to authenticate via mobile, email, or hardware tokens.
- The intuitive interface and quick authentication processes, such as swipe-up approvals that improve overall productivity.
- However, some users note occasional delays in mobile notifications and a learning curve during initial setup.
- Overall, Ping Identity offers a reliable and efficient SSO experience, balancing security with ease of use.
SSO Protocols Supported by Ping Identity SSO
Users consistently highlight its flexibility—supporting a wide range of protocols like SAML, OIDC, and WS-Fed
- SAML: SAML is an XML-based open standard for exchanging authentication and authorization data between parties, specifically between an identity provider (IdP) and a service provider (SP). Applications like Salesforce, Workday, and many enterprise web applications utilize SAML for SSO.
- OIDC: OIDC is an authentication layer on top of the OAuth 2.0 authorization framework, enabling applications to verify user identity based on authentication performed by an authorization server. It simplifies authentication for developers and provides a standardized way to obtain user information.
- WS-Fed: WS-Fed is a specification that defines how to manage identity federation in web services. Older Microsoft applications and some legacy enterprise systems often use WS-Fed for federated identity management
Multi-Factor Authentication (MFA)
Users appreciate the variety of Multi-Factor Authentication (MFA) options available, including push notifications, biometrics, SMS, voice calls, and hardware tokens.
- This flexibility allows companies to customize authentication methods to their specific security needs and user preferences.
- Many users highlight the system's flexibility in deployment—be it on-premises, cloud, or hybrid environment
Multi-Factor Authentication Frameworks: Ping Identity Supports
- Push Notifications: Push notifications send authentication requests directly to a user's mobile device, allowing them to approve or deny login attempts with a simple tap. This method enhances security by using device possession and user interaction.
- Biometrics: Biometric authentication uses unique biological traits, such as fingerprints or facial recognition, to verify a user's identity. This method provides a high level of security and a quick user experience.
- SMS: SMS-based authentication sends one-time passcodes (OTPs) to a user's mobile phone via text message. This method is widely accessible and easy to use, but it's also vulnerable to SIM swapping and interception attacks.
- Voice Calls: Voice call authentication delivers OTPs to users through automated phone calls, providing an alternative to SMS. This method can be useful for users without smartphones, but it can be susceptible to social engineering and call interception.
- Hardware Tokens: Hardware tokens are physical devices that generate OTPs, providing a highly secure authentication method. These tokens are resistant to phishing and interception attacks, as they don't rely on the internet or mobile networks.
Access Management
Ping Identity allows companies to control user access to applications and resources based on defined policies. This includes features like fine-grained authorization and contextual access management.
- Users appreciate the ability to deploy Ping Identity solutions in various environments, including Docker containers and infrastructure-as-code setups, facilitating seamless integration into existing IT infrastructures.
- While Ping Identity is very flexible, some users have expressed that very granular customization can become complex.
- Some users note that the administrative console could be more intuitive and that certain documentation lacks clarity, which can pose challenges during initial setup and configuration.
Identity Verification
Ping Identity offers solutions for verifying user identities, which is crucial for secure customer
onboarding and fraud prevention.
- The platform's ability to assess contextual factors such as IP address, geolocation, and user behavior enables dynamic risk evaluation, assures security without compromising user experience.
- That said, when transitioning to new devices, several users did note difficulties, noting that the process of unpairing and re-enrolling can be cumbersome and may require IT assistance.
API Security
Ping Identity's ability to integrate with various API gateways and other security tools is a significant advantage. This flexibility allows organizations to build a comprehensive API security strategy.
- As with other areas of the Ping Identity platform, some users have expressed concerns about the speed and effectiveness of technical support. This can be a significant issue when dealing with critical API security issues.
- The platform's support for industry-standard protocols like OAuth 2.0 and OpenID Connect (OIDC) is also well-received, making it easy to support most apps. However, it does have limited access support for legacy applications.
Directory Services
A recurring theme is the platform's ability to consolidate user identity data. This simplifies administrative tasks, especially in complex enterprise environments.
- Support for industry-standard directory protocols, such as LDAP, is also highly appreciated, in making sure there is compatibility with your existing infrastructure.
- Users find that Ping Identity can handle large user bases and authentication request loads, which can be very important for enterprise-level applications.
Ping Identity Reviews & Ratings
User sentiment towards Ping Identity is generally positive, with many users praising its robust security features, scalability, and comprehensive IAM capabilities.
However, some recurring themes in user reviews include:
- Complexity: As mentioned earlier, the complexity of Ping Identity's solutions is a common concern. Users may require significant training and expertise to implement and manage the platform effectively.
- Cost: Pricing is another factor that comes up frequently in reviews, with some users finding Ping Identity to be expensive.
- Implementation Challenges: Some users report difficulties with the initial setup, integration with existing systems, and migration from other IAM solutions.
- Support: While Ping Identity offers customer support, some users have expressed mixed opinions on the responsiveness and effectiveness of the support team.
Overall View of Ping Identity
On the whole, the overall view of Ping Identity reveals a powerful and versatile IAM solution, particularly favored by large enterprises, though it presents certain challenges.
- For enterprises, Ping Identity stands out as a highly secure and adaptable IAM platform. Users frequently praise its robust authentication and authorization capabilities, as well as its ability to handle complex identity management scenarios. However, the complexity of its configuration and the potential for high costs are recurring points of concern.
- Ping Identity's structure and pricing model mean it is less commonly used by smaller companies. Its robust nature, while beneficial for large-scale operations, can be overly complex and expensive for smaller companies. The overall costs related to implementation and upkeep make it less than ideal for smaller budgets.
- Conversely, for organizations with substantial financial resources and complex IAM needs, Ping Identity offers a comprehensive suite of features. These include advanced MFA, flexible SSO, and extensive user lifecycle management tools.
- The high level of customizability and the ability to integrate with diverse systems are significant advantages, although the steep learning curve and the need for specialized expertise are important considerations.
Infisign: The Best Ping Identity Alternative
Infisign stands out as a top Ping Identity alternative for its features and transparent pricing. Without extra charges for integrations, directory synchronization, or device passkeys, Infisign is an IAM solution that’s built for companies of all sizes.
Additionally, it provides over 6000 APIs and SDKs for easy integration across your entire technology infrastructure.
With access management, Infisign aligns with industry standards by delivering both access management for the workforce with its IAM suite and access management for customers with UniFed (its CIAM solution):
- Passwordless Verification: Enhance security with multi-layered authentication (MFA) that defends against phishing and credential-based threats. Infisign supports various verification methods, encompassing OTPs, magic links, device passkeys, and biometric checks, ensuring robust authentication without hindering user experience.
- Adaptive Multi-Factor Authentication (MFA): Employ risk-adjusted authentication through adaptable MFA policies. Infisign analyzes contextual elements—device security status, IP address, location—to apply suitable authentication challenges, balancing strong security with seamless legitimate access.
- AI-Access Automation: Improve user lifecycle administration across collaboration platforms. Infisign's AI-powered functions accelerate user onboarding and offboarding, maintaining consistent access control for essential applications like Slack and Microsoft Teams.
- Network Access Gateways: Apply zero-trust security to traditional on-site applications. Infisign's network access gateway facilitates secure, cloud-based access to on-premises resources, linking outdated infrastructure with contemporary security needs.
Interested in learning how Infisign compares to Ping Identity? Why not sign up for a free demo?
FAQs about Ping Identity
What is Ping Identity used for?
Ping Identity provides a comprehensive platform for Identity and Access Management (IAM) and Customer Identity and Access Management (CIAM). It's used to centrally manage and secure access to a wide range of digital resources, including applications, APIs, and sensitive data, for both employees and customers.
Who uses Ping Identity?
Ping Identity predominantly caters to large enterprises and companies with complex security and identity management needs. This includes companies across various sectors like finance, healthcare, government, and technology, where security, scalability, and compliance are of utmost importance.
What are the key benefits of Ping Identity?
Key benefits of Ping Identity include its reliable IAM capabilities, advanced security features, scalability, and flexibility for enterprises.
