a good thing!
Modern Access Management
for the Digital Enterprise
PingAccess provides the comfort of knowing that only the right users can access sensitive resources. A comprehensive policy engine ensures that those requesting access have the appropriate permissions, user context and device posture to access applications, down to the URL level. For APIs, policies can be applied to disallow certain HTTP transactions to users in untrusted contexts, such as administrators using DELETE outside the corporate network.
By applying policies in context, PingAccess can verify user identity across specific resources, evaluating a diverse range of methods and circumstances in which the user is requesting access. ABAC, RBAC, authentication levels, IP address, web session attributes and OAuth attributes and scopes can be used to approve or deny access to sensitive resources. PingAccess also integrates with third-party threat intelligence providers to augment contextual data included in authorization policies.
Ensure consistent enforcement of security policies by centralizing access control across diverse enterprise application portfolios in hybrid IT environments. From a single console, policies for web applications, APIs and single page applications hosted in any domain can be written, managed and updated.
PingAccess abstracts sessions from applications and APIs, removing the risk of errors and inconsistent session security parameters. It also reduces the risk of man-in-the-middle attacks like session hijacking with encrypted session tokens scoped for specific applications.
PingAccess continuously validates authentication tokens with PingFederate in predetermined time intervals. If there’s a change in user context—or if a single logout process terminates a user’s authentication session—all application sessions will immediately be terminated.
Automation in a Hybrid IT World
You can deploy PingAccess in your own datacenter or in the cloud to support hybrid IT environments, and you can realize value faster by leveraging Docker images and cloud containerization. This provides flexibility to enterprises who prefer the control and customization possible from a single-tenant implementation of PingAccess in their private cloud, instead of a multi-tenant IDaaS approach.
Easy Migration From Legacy WAM
With cloud, API and mobile-first mandates, it’s easy to see how significantly limiting legacy web access management (WAM) systems are. PingAccess provides a modern, lightweight solution that includes the tools and expertise to coexist or migrate from your legacy WAM. Token translators and policy migration tools help to enable coexistence and avoid downtime disruption. You can automatically migrate your legacy WAM policies for use in PingAccess, which helps automate the creation, testing and promotion of policies between development environments.