The Basics: How Do Ping Identity Products Work?
This section covers product basics such as how do Ping Identity products implement the three primary functions of Internet Identity Security. It also covers deployment models for PingFederate and PingConnect.
How does Ping implement Internet SSO and federated identity?
There are two primary approaches to providing Internet SSO: a set of industry standards that enable a capability called federated identity, and proprietary SSO implementations. While PingFederate and PingConnect primarily use federated identity standards to implement Internet SSO, they also utilize proprietary mechanisms for some specific use cases such as mobile device support.
How does Ping implement Internet user account management?
Ping Identity offers two different types of Internet user account management:
- Express Provisioning – a Service Provider-side solution that uses the attributes in incoming SAML assertions to create and update user accounts.
- SaaS Provisioning – an Identity Provider-side solution that integrates a corporate directory with a SaaS provider’s provisioning API to automatically create, update and delete user accounts in the Service Provider’s directory for a selected set of users.
How does Ping implement Security Token Services and universal token translation?
PingFederate includes a WS-Trust compliant Security Token Service (STS) that performs universal token translation by accepting one type of security token as input and producing an equivalent security token of a different type as output. It uses a plug-in architecture to support the processing and generation of different token types.
How do I deploy PingFederate?
PingFederate has evolved from a standalone federated identity server into a complete Internet identity security software platform designed to meet any organization’s Internet-facing identity management needs. It is packaged as a single software product that provides three primary Internet Identity Security functions: Internet SSO, Internet User Account Management and Universal Security Token Translation. These three functions are supported by a set of common services.