PingAccess
PingOne Advanced Access Security
Comprehensive Access Security
PingAccess is a centralized access security solution with a comprehensive policy engine. It provides secure access to applications and APIs down to the URL level, and ensures that only authorized users access the resources they need.
Modern Access Management
for the Digital Enterprise
- Secure Authorization
PingAccess provides the comfort of knowing that only the right users can access sensitive resources. A comprehensive policy engine ensures that those requesting access have the appropriate permissions, user context and device posture to access applications, down to the URL level. For APIs, policies can be applied to disallow certain HTTP transactions to users in untrusted contexts, such as administrators using DELETE outside the corporate network.
- Contextual Policies
By applying policies in context, PingAccess can verify user identity across specific resources, evaluating a diverse range of methods and circumstances in which the user is requesting access. ABAC, RBAC, authentication levels, IP address, web session attributes and OAuth attributes and scopes can be used to approve or deny access to sensitive resources. PingAccess also integrates with third-party threat intelligence providers to augment contextual data included in authorization policies.
- Centralized Administration
Ensure consistent enforcement of security policies by centralizing access control across diverse enterprise application portfolios in hybrid IT environments. From a single console, policies for web applications, APIs and single page applications hosted in any domain can be written, managed and updated.
- Centralized Session Management
PingAccess abstracts sessions from applications and APIs, removing the risk of errors and inconsistent session security parameters. It also reduces the risk of man-in-the-middle attacks like session hijacking with encrypted session tokens scoped for specific applications.
- Continuous Authorization
PingAccess continuously validates authentication tokens with PingFederate in predetermined time intervals. If there’s a change in user context—or if a single logout process terminates a user’s authentication session—all application sessions will immediately be terminated.
Deploy Anywhere.
Protect Everything.
You can deploy PingAccess using agents, proxy or a combination of both, and it integrates easily with your web applications with agents for Apache, NGNIX, IIS and more. Wherever your resources are hosted, PingAccess can also extend standards based, federated SSO to all applications using HTTP header injection, JWT tokens and token mediation. You can even secure access and extend SSO to on-premises web applications through third-party cloud identity stores like Azure AD. To learn more about the PingAccess for Azure AD partnership, read our white paper.
Automation in a Hybrid IT World
You can deploy PingAccess in your own datacenter or in the cloud to support hybrid IT environments, and you can realize value faster by leveraging Docker images and cloud containerization. This provides flexibility to enterprises who prefer the control and customization possible from a single-tenant implementation of PingAccess in their private cloud, instead of a multi-tenant IDaaS approach.
Easy Migration From Legacy WAM
With cloud, API and mobile-first mandates, it’s easy to see how significantly limiting legacy web access management (WAM) systems are. PingAccess provides a modern, lightweight solution that includes the tools and expertise to coexist or migrate from your legacy WAM. Token translators and policy migration tools help to enable coexistence and avoid downtime disruption. You can automatically migrate your legacy WAM policies for use in PingAccess, which helps automate the creation, testing and promotion of policies between development environments.
Granular API Access Control
PingAccess provides foundational API security by controlling access to your enterprise’s internal and public-facing APIs. You can deploy at the perimeter of a protected network between mobile, browser or server-based client applications and protected APIs to ensure only users with the right attributes can gain access. PingAccess also supports more granular API access control, limiting users to transactions permitted by the authorization scopes contained in their access tokens.
Ready to dig deep into modern access management using PingAccess?
Start Today
See how Ping can help you deliver secure employee and customer experiences in a rapidly evolving digital world.
Request a free demo