PingOne® for Customers is a cloud-hosted identity-as-a-service (IDaaS) solution that enables easy embedding of customer identity and access management (CIAM) services—like registration, authentication, single sign-on (SSO) and multi-factor authentication (MFA)—into applications. This API-first solution enables development teams to quickly and easily integrate and automate the deployment of identity services via REST APIs or administrative UIs. With PingOne for Customers, you deliver the convenience and usability your customers expect while meeting the security, interoperability and performance requirements of your enterprise IT team.
Standards Support
|
Capabilities
- Easy to use authentication APIs
- Social login (Facebook, Google, Apple, ...)
- Inbound and outbound SAML support
- Per application policies, access, mappings and UIs
- MFA (SMS, email, mobile push notifications)
- Flexible schema to store and manage customer profiles
- Multiple environments in a single account (multi-tenant)
- Delegated administration across multiple environments
- Passwordless authentication
- Out-of-the-box UIs
- User and administrator auditing
- Customer self-service profile management, password reset and security preferences
- On-prem integrations (LDAP, SCIM, AD, …)
- Custom OIDC/SAML identity provider
- Outbound provisioning
- Identifier first authentication
- Subscriptions (webhooks)
- SAML assertion encryption
- Risk-based authentication policies
- Automatic enrollment for mobile applications
- Custom password policy
- PKCE enforcement
- Custom domains
- Access and ID token customization
- Refresh tokens
- Custom SMTP email notification server
PingOne for Customers Makes Identity Easy for Developers
When you’re launching a customer-facing application, speed is critical. PingOne for Customers handles security, scalability and identity best practices for you so you can focus on building your application and meeting launch deadlines. PingOne for Customers makes it fast and easy to leverage identity services that make user interactions with your application convenient and secure.
Authentication
Embed login (including social login or passwordless login), registration, federation and multi-factor authentication (MFA) into your app. Customize your authentication on an app-by-app basis with custom authentication flows and policies.
MFA for Customers
PingOne for Customers makes multi-factor authentication secure and convenient. It allows you to use SMS, email or push notifications from custom iOS or Android apps for MFA. You can use any of those authentication methods as primary authentication factors to achieve strong passwordless authentication. You can even leverage APIs to allow customers to manage their MFA preferences and devices.
User Management
Leverage REST APIs to manage user data, account states, passwords, password policies and more for distinct identity types and user populations.
User Self-service
Never worry about creating self-service registration, profile management or password reset experiences. With PingOne for Customers, embedding these identity services is easy.
Tenant-in-Tenant Architecture
Create multiple development, staging and production environments for apps to support DevOps, foster agile development and delegate administration. You can even manage administrator permissions across those environments.
Custom Schema
Enable or disable built-in attributes or add custom structured or unstructured attributes to user schemas using an administrative console or developer-friendly REST API calls.
Password Management
PingOne for Customers handles password security for you. Using REST APIs, you can check the state of user passwords to see whether they’re expired, set and update user passwords, validate user passwords against password policies, and more.
Built for Developers and Enterprise IT
In addition to being easy for developers to use, your IDaaS solution also needs to meet IT’s requirements. If it doesn’t, you may be forced to heavily modify—or worse, reimplement—your identity solution in the future. PingOne for Customers will help your development team get identity right the first time.
PingOne for Customers Meets Enterprise IT Requirements
Synchronization with on-premises identity stores
Standards support (OAuth, OpenID Connect, SAML)
Delegated administration capabilities
Enterprise scale, performance and security
To learn more about PingOne for Customers and view our docs, visit developer.pingidentity.com.
Tenant-in-tenant architecture with multiple environments in a single PingOne for Customers account supports the software development lifecycle and delegated administration.
Take the Next Step
See how Ping can help you stay ahead of the curve in a rapidly evolving digital world.
