datasheet

PingFederate

DOWNLOAD PDF

PingFederate® is the leading enterprise federation server for user authentication and standards-based single sign-on (SSO) for employee, partner and customer identity types. As enterprises embrace digital business initiatives, concerns about security and user experience are rising to the forefront. PingFederate allows organizations to break free from expensive, inflexible legacy IAM solutions and leverage a modern identity and access management solution designed to meet complex enterprise demands. By integrating silos of identities and applications inside the enterprise, across partners and into the cloud, PingFederate enables:

 

  • SSO and identity federation
  • Registration, profile management and password reset
  • Adaptive authentication policies
  • Social login and account linking

 

PingFederate easily integrates with existing IAM systems and is simple to configure for rapid deployment. It seamlessly integrates with the rest of the Ping Identity Platform to provide a comprehensive enterprise solution for delivering secure and seamless digital experiences for your employees, partners and customers. 

Features & Benefits

 

  • Single integrated solution
  • Proven interoperability
  • Secure and standards-based
  • Lightweight, scalable architecture
  • Dozens of proven integrations
  • Multi-protocol support
  • Secures web, mobile and APIs
  • Advanced user management

 

Supported Federation Standards

 

  • SAML
  • WS-Federation
  • WS-Trust
  • OAuth
  • OpenID
  • OpenID Connect
  • SCIM

Capabilities & Benefits

 

SSO, IDENTITY FEDERATION & AUTHENTICATION

  • Manage identities from any directory and enforce attribute-based access policies
  • Bridge identity systems quickly to accelerate new customer and partner relationships
  • Utilize proven industry standards and pre-built adapters & connectors
  • Collect and aggregate identity attributes from any number of sources, including external identity repositories or attribute services
  • Support elastic scaling for high-performance, cost-effective identity infrastructures
  • Leverage social login and account linking with Facebook®, Google, LinkedIn®, and others

 

MULTI-FACTOR AUTHENTICATION SUPPORT

  • Integrate with PingID® or other third-party MFA solutions
  • Utilize customized authentication methods for any scenario
  • Create rules and authentication chains for sensitive data access or for groups and roles
  • Utilize contextual data such as location, device type and network to develop risk-based rules

 

AUTOMATED PROVISIONING

  • Enable rapid, automated provisioning and deprovisioning of users
  • Provide users access to the apps and resources they need
  • Out-of-the-box support for standards-based provisioning (SCIM) and for proprietary provisioning protocols used by many popular SaaS applications
  • Leverage just-in-time user provisioning and account updates based on inbound claims 

 

USER SELF-SERVICE

  • Registration and self-service profile management
  • Password reset, account unlock and forgotten username
  • Customizable branding including registration, login, email templates, text messages and more
  • Easily configurable for multiple identity types and user populations

 

MOBILE & API ACCESS

  • Deliver a secure SSO experience for mobile applications
  • Secure web and mobile apps with OAuth and OpenID Connect
  • Ensure all access to mobile application data is controlled and auditable
  • Deploy identity and access control without refactoring backend applications

 

APPLICATION INTEGRATION

  • Microsoft IIS and Apache HTTP Server
  • IBM® WebSphere, Oracle® Weblogic, Apache Tomcat and other application servers
  • CA Single Sign-on (formerly SiteMinder), Oracle Access Manager, Tivoli Access Manager, SAP Netweaver and other web access management systems
  • Active Directory, Azure AD, LDAP and other authentication systems
  • PingID, RSA SecurID®, Symantec™ VIP, Google Authenticator & other two-factor and strong authentication systems Office 365, PeopleSoft, ADP, Microsoft Dynamics and other commercial applications

Features & Benefits

 

SSO AND IDENTITY FEDERATION
PingFederate offers users seamless resource access and eliminates insecure password proliferation.

 

CONTEXTUAL MFA
Flexible authentication and issuance policies with integration to leading MFA solutions like PingID, reduces risk of compromised credentials

 

AUTOMATED PROVISIONING
Reduce the risk of unauthorized access and orphaned accounts by leveraging PingFederate for provisioning and deprovisioning users.

 

MOBILE AND API SECURITY
Secure your APIs using mature identity standards as well as state-of-the-art authentication and authorization protocols.

 

FEDERATION HUB
Simplify and extend the reach of federation through token translation services across most common federation protocols.

 

SIEM AND AUDIT LOGGING
Address compliance and regulatory requirements through integration with popular SIEM vendors and reporting tools.

 

Related Resources