# PingAuthorize - [Try PingAuthorize](https://www.pingidentity.com/en/company/contact-sales.html) - [Get the Datasheet](https://hub.pingidentity.com/datasheets/3198-pingauthorize) ## Tour the Product ### See Video Transcript Video Transcript Let's talk about securing fine-grained access to sensitive customer data. Multiple forces are pressuring enterprises to take action, Including consumer privacy and data protection legislation, the risk and impact of exposure or Breaches of consumer data, and meeting user expectations about data rights, Consents, and privacy preferences. There's a lot of data about your customers, beyond just what's stored in user profiles, Including things like transactions and browsing history. It's being stored in many places across your enterprise and in the cloud. And it's accessed more and more by remote employees and outside partners through APIs. In an ideal world, we trust employees and partners to only request the Customer data they Need and are authorized to access. Unfortunately, there isn't a single source of truth for what an authorized use of a Customer's data actually is. There are, however, many stakeholders who would like to have a say in data access policy Decisions. Without visibility or a Centralized-UI for This today, the burden of gathering and reconciling detailed data security requirements, Coding policies and validating them all with each of these stakeholders is falling to each of your API developers and database admins. Ping authorized can help. It provides fine-grained, dynamic, externalized authorization for all of your customer data. It's a policy engine for administering and enforcing fine-grained access controls on user Data in your data stores and APIs. It can allow, block, filter, or obfuscate unauthorized data, Preventing it from getting in the wrong hands. It gives your enterprise a way to enforce consent and data privacy preferences, Including privacy management in delegated access scenarios, All in compliance with regulations. For Zero Trust architectures, Ping Authorized gives you the flexibility of setting Authorization perimeters around granular customer data attributes. Ping Authorize connects in real time to any data source to enable attribute-based Access control across your enterprise environment. Dynamic authorization policies use real-time connections to policy attributes, Which means that when underlying attributes change, the authorization changes automatically. Ping Authorize externalizes authorization from code to a centralized, collaborative drag-and Drop Interface, where business users build and test policies by layering attributes Visual Policy Decision Tree. Delegated policy administration speeds things along because developers and database admins now Longer have to manually code data access policies and aren't solely responsible for security. With today's service-oriented architectures, External clients and modern applications access customer data through APIs. Deployed here, Ping Authorize acts as an API data security gateway, Deployed as a proxy or sideband to your existing API management gateways. At this layer, developers don’t have to change how they request data; Since policies are being enforced on the other side of this flow. The bottom line is that protecting valuable customer data requires fine-grained, Dynamic, externalized authorization capabilities that can be deployed where it counts. To learn about protecting customer data with Zero Trust security, privacy, and consent enforcement, visit www.pingidentity.com. Thanks for watching. ## Meet PingAuthorize **Ping**Authorize provides a centralized policy creation and enforcement engine that evaluates real-time data points and contextual information to allow access to applications and data. Have you outgrown role-based access rules? **Ping**Authorize gives you the flexibility to easily create policies based on a variety of data points through a drag-and-drop UI. This software makes it easy to comply with regulatory requirements, enhance security, and improve business agility. ## How it Works **Ping**Authorize allows your developers to access data by invoking a SCIM API rather than connecting directly, or at the API layer as a proxy or sideband to existing API management gateways. Administrators create a “trust framework” of access policies by connecting and defining the data sources, hierarchies of conditions, and evaluation rules. **Ping**Authorize’s policy decision engine evaluates all access requests and responses and enforces policies. At the API layer and beyond user data, **Ping**Authorize can govern any type of user-related structured data, like healthcare records, IoT device data, and banking transactions. ### With PingAuthorize you can: Easily control authorization logic and update policies with a simple drag-and-drop UI Centrally enforce policies to comply with regulatory requirements, enhance security, and improve business agility Move beyond role-based architecture controls for decisioning and save time by taking the burden off resource owners to make authorization rule changes User Journey Alignment **Ping**Authorize is integral to the “Authorized” stage of the user journey. ### Comply with Data and Privacy Regulations **Ping**Authorize helps you comply with regulations such as GDPR, [HIPAA](https://www.pingidentity.com/en/industry/healthcare.html), [GLBA](https://www.pingidentity.com/en/industry/financial-services.html), CCPA, PSD2, CDR, and other regulatory requirements. Policies can evaluate customer consent, citizenship, or any other relevant information before sharing customer data. ![Enforce data anywhere graphic](https://images.pingidentity.com/image/upload/f_auto,q_auto,w_auto,c_scale/ping_dam/content/dam/picr/img/pl/cap/da/IMG-Ill-PingAuthorize-5-1082x1082.png) ### Enforce Data Anywhere **Ping**Authorize can enforce data access policies at either the datastore or API layer. In either case, it monitors requests and responses and enforces policy decisions. Best of all, it doesn’t require API developers, database administrators, or app developers to modify their code to ensure that only compliant data is returned. ### Filter Specific Attributes Configure **Ping**Authorize policies to allow an API call, but then filter, obfuscate, or remove specific data attributes in the response. This gives you tremendous flexibility when it comes to managing fine-grained data authorization and control. ### Delegate Data Access **Ping**Authorize enables users to delegate access control of their data to customer service reps, trusted individuals, family members, third parties, and others. For example, you can limit search results to only those users a delegated administrator has the right to view. You can also enforce which attributes delegated administrators can view and the actions they can take. ## Benefits & Features ### Create policies based on any data point Construct fine-grained access rules based on identity attributes, entitlements, consents, and any other contextual information ### Reduce dependency on hard-to-hire/retain experts Externalize policy administration to business users instead of developers ### Meet regulatory requirements Provide and enforce consent, data privacy, and other regulations in a single console ### Prevent fraud and minimize risk Ingest fraud and risk signals to build adaptive authentication and authorization ### Make changes quickly Anyone can update policies in minutes with a simple drag-and-drop UI ### Minimize friction in the user experience Orchestrate context-aware authentication and approval workflows ### Increase security Allow, block, filter or obfuscate unauthorized data ### Existing APIs don’t need configuration changes Deployed as API security gateway or as SCIM API for data stores ### Drive tangible value right away Easily configure access policies with out-of-the-box examples and templates ## Business Value Gain business & IT agility Minimize friction in the user experience Meet regulatory requirements ## Flexible Deployment Options **Ping**Authorize can be deployed as: - **PingOne** Cloud Software - Deploy anywhere cloud containers [Learn More About Our Deployment Options](https://www.pingidentity.com/en/platform/deployment-options.html) Additional Information [Documentation PingAuthorize Documentation](https://docs.pingidentity.com/pingauthorize/latest/paz_home_landing_page.html) [Datasheet PingAuthorize Datasheet](https://hub.pingidentity.com/datasheets/3198-pingauthorize) [Integrations Marketplace Integrations for PingAuthorize](https://marketplace.pingone.com/home) [Product Release Notes PingAuthorize Release Notes](https://docs.pingidentity.com/pingauthorize/latest/release_notes/paz_release_notes_legacy_home.html) [Community PingAuthorize Community Forum](https://support.pingidentity.com/s/topic/0TO1W000000dcxNWAQ/pingauthorize) [Community Support Community](https://support.pingidentity.com/s/community-home) Related Resources [White Paper Protect Sensitive Data with Dynamic Authorization](https://hub.pingidentity.com/white-papers/3571-protect-sensitive-data-with-dynamic-authorization) Start Today Contact Sales [sales@pingidentity.com](mailto:sales@pingidentity.com) See how Ping can help you deliver secure employee, partner, and customer experiences in a rapidly evolving digital world.