Forefront Identity Manager (Discontinued) vs. PingOne from Ping Identity

Forefront is excellent for multi-factor authentication in the cloud or on premises. It is fast and lightweight. [It provides] Ease of self-management of credentials. The user web interface is easy to use and understand. Less time is spent by IT staff resetting passwords or unlocking accounts.

Incentivized

The products we're using work well and are reliable. We've had very few outages, and when we have, their support team has been highly responsive and addressed the issues quickly. They are very customer focused and have been great partners throughout the relationship. I'm looking to adopt more of their technologies over the coming year.

• Sync of local on premises with the cloud
• Allows for users to manage their credentials
• Allows for two-factor authentication

Incentivized

• PingFederate is feature-rich, and quickly updated with the latest standards and profiles. This gives us more tools to apply identity standards to modern business challenges.
• PingFederate and PingCentral were also easy to deploy within docker containers and weave into an infra-as-code deployment, keeping operational overhead low.
• PingID has an array of supported authenticators for nearly every use case, and early FIDO2 support has us looking into moving to passwordless much more quickly than I had anticipated.

Incentivized

• Cloud integration needs some love. I think most companies nowadays have a hybrid model with some in-house and some cloud. A complete integration would be a huge win.

Incentivized

• I believe it is very secure & not sure if it needs any improvement as such
• Only suggestion would be it should not ask users to re-confirm if the session is still active

Incentivized

Easy to use; all UI's are user friendly and easy to learn.[The] possibility to use API is [a] big value as well. We really like integration with CyberArk; with it we can manage privileged accounts according to company standards without breaking any rules, and we can be 100% sure that only approved persons will have administrative access.

For our enterprise, they've assigned a customer success manager to ensure our needs are being addressed, and that person is top notch in knowing our priorities, enhancement requests, and open cases. Every time we've needed to engage support for a problem or a how-to question, they've been highly responsive and followed up with us to ensure the case was completely resolved. Their support personnel are highly skilled and trained. This is a very customer-centric company.

We selected Forefront because we know the support will be there for the long haul and its integration with other MS products.

Incentivized

We tested PingOne but our security team was not happy with it (because of cloud exposure). We tested PingId as well but our security team was not happy with it (because of cloud exposure). We [spent] some time on PingDataGovernance but so far we don't have any use case for this product. We started exploration for PingDataSync (to synchronize two different LDAP directories), [and] so far it looks promising.

• Reduce the amount of time invested doing troubleshooting.
• Reduce the IT admin complexity by presenting an intuitive UX with codeless provisioning.
• IT Admins can simplify the process to create workflows with the web-based GUI of ILM 2 portal, and also include more complex workflows designed outside of the portal by importing XAML files.

Incentivized

• it is positive with saving the cost
• some drawback with aging solution
• directory is solid and provide lots of cost saving

Incentivized