PingAccess

Access security for apps and APIs 

read the datasheet get the guide
what it does

comprehensive

access security

PingAccess is a centralized access security solution with a comprehensive policy engine. It provides secure access to applications and APIs down to the URL level, and ensures that only authorized users access the resources they need.

read the datasheet
what it does

modern access management

for the digital enterprise

  • Secure Authorization

    PingAccess provides the comfort of knowing that only the right users can access sensitive resources. A comprehensive policy engine ensures that those requesting access have the appropriate permissions, user context and device posture to access applications, down to the URL level. For APIs, policies can be applied to disallow certain HTTP transactions to users in untrusted contexts, such as administrators using DELETE outside the corporate network.

  • Contextual Policies

    By applying policies in context, PingAccess can verify user identity across specific resources, evaluating a diverse range of methods and circumstances in which the user is requesting access. ABAC, RBAC, authentication levels, IP address, web session attributes and OAuth attributes and scopes can be used to approve or deny access to sensitive resources. PingAccess also integrates with third-party threat intelligence providers to augment contextual data included in authorization policies.

  • Centralized Administration

    Ensure consistent enforcement of security policies by centralizing access control across diverse enterprise application portfolios in hybrid IT environments. From a single console, policies for web applications, APIs and single page applications hosted in any domain can be written, managed and updated.

  • Centralized Session Management

    PingAccess abstracts sessions from applications and APIs, removing the risk of errors and inconsistent session security parameters. It also reduces the risk of man-in-the-middle attacks like session hijacking with encrypted session tokens scoped for specific applications.

  • Continuous Authorization

    PingAccess continuously validates authentication tokens with PingFederate in predetermined time intervals. If there’s a change in user context—or if a single logout process terminates a user’s authentication session—all application sessions will immediately be terminated.

how it does it

deploy anywhere.

protect everything.

You can deploy PingAccess on premises or in the cloud using agents, proxy or a combination of both, and it integrates easily with your web applications with agents for Apache, NGNIX, IIS and more. For cloud deployments, we include customizable AWS automation templates that enable you to rapidly deploy advanced clustering, replication capabilities and more with minimal effort. Wherever your resources are hosted, PingAccess can also extend standards based, federated SSO to all applications using HTTP header injection, JWT tokens and token mediation. You can even secure access and extend SSO to on-premises web applications through third-party cloud identity stores like Azure AD. To learn more about the PingAccess for Azure AD partnership, read our white paper.

get the white paper
how it does it

easy migration from legacy wam

With cloud, API and mobile-first mandates, it’s easy to see how significantly limiting legacy web access management (WAM) systems are. PingAccess provides a modern, lightweight solution that includes the tools and expertise to coexist or migrate from your legacy WAM. Token translators and policy migration tools help to enable coexistence and avoid downtime disruption. You can automatically migrate your legacy WAM policies for use in PingAccess, which helps automate the creation, testing and promotion of policies between development environments.

 

how it does it

granular api access control

PingAccess provides foundational API security by controlling access to your enterprise’s internal and public-facing APIs. You can deploy at the perimeter of a protected network between mobile, browser or server-based client applications and protected APIs to ensure only users with the right attributes can gain access. PingAccess also supports more granular API access control, limiting users to transactions permitted by the authorization scopes contained in their access tokens.

get the white paper

Ready to dig deep into modern access management using PingAccess?