Jamf Connect vs. PingOne from Ping Identity

Jamf Connect is a nice and customizable tool for password change or password sync and account creation during an enrollment process. The configuration is not very easy to understand at the start. Especially if an iDP comes into play and you don't have an idea with Azure or similar services. With Jamf Connect ad bind is dead on macs.

The products we're using work well and are reliable. We've had very few outages, and when we have, their support team has been highly responsive and addressed the issues quickly. They are very customer focused and have been great partners throughout the relationship. I'm looking to adopt more of their technologies over the coming year.

• password sync works very well
• regular updates to Jamf Connect with improvements
• small and simple tool
• Account creation is now on next level after we don't need AD Bind

• PingFederate is feature-rich, and quickly updated with the latest standards and profiles. This gives us more tools to apply identity standards to modern business challenges.
• PingFederate and PingCentral were also easy to deploy within docker containers and weave into an infra-as-code deployment, keeping operational overhead low.
• PingID has an array of supported authenticators for nearly every use case, and early FIDO2 support has us looking into moving to passwordless much more quickly than I had anticipated.

Incentivized

• the Jamf configuration app for the config profiles looks not really Jamf-like
• Why are under "Jamf Connect Deployment and Update Settings" in Jamf Pro all possible configuration profiles listed? We have some and I don't think there had to list every!?
• how the Jamf Connect updates work under "Jamf Connect Deployment and Update Settings" is very unclear. i.e. for troubleshooting

• I believe it is very secure & not sure if it needs any improvement as such
• Only suggestion would be it should not ask users to re-confirm if the session is still active

Incentivized

Easy to use; all UI's are user friendly and easy to learn.[The] possibility to use API is [a] big value as well. We really like integration with CyberArk; with it we can manage privileged accounts according to company standards without breaking any rules, and we can be 100% sure that only approved persons will have administrative access.

For our enterprise, they've assigned a customer success manager to ensure our needs are being addressed, and that person is top notch in knowing our priorities, enhancement requests, and open cases. Every time we've needed to engage support for a problem or a how-to question, they've been highly responsive and followed up with us to ensure the case was completely resolved. Their support personnel are highly skilled and trained. This is a very customer-centric company.

We tested PingOne but our security team was not happy with it (because of cloud exposure). We tested PingId as well but our security team was not happy with it (because of cloud exposure). We [spent] some time on PingDataGovernance but so far we don't have any use case for this product. We started exploration for PingDataSync (to synchronize two different LDAP directories), [and] so far it looks promising.

• we need more time to understand how Jamf Connect and the configuration "really" works

• it is positive with saving the cost
• some drawback with aging solution
• directory is solid and provide lots of cost saving

Incentivized