Platforms
Identity and API security platforms
What each kind of product does, how it fits an architecture and what to ask before buying. No rankings, no affiliate links, no partnerships.
Most identity architectures are assembled from a few kinds of products: something that authenticates users and issues tokens, something that manages accounts and access over time, something that guards APIs, and sometimes a dedicated policy engine. Start with the platform selection guide if you are choosing, or read about a category below.
| Category | Main job | Pages |
|---|---|---|
| Federation server / access management | SSO, token issuance, MFA | PingFederate, SiteMinder |
| Identity cloud (IDaaS) | The same, delivered as a service | PingOne |
| Identity governance (IGA) | Lifecycle, requests, reviews | Identity management systems |
| Entitlement and policy | Fine-grained authorization | Entitlement management, Axiomatics Policy Server |
| API gateway | Protect and manage APIs | API gateways |
| Supporting tools | Directories, PKI, secrets, testing | Other tools |
- Platform category
API gateways
What an API gateway does for security: token validation, rate limits, schema checks, mTLS and routing; how it differs from an authorization server.
- Product overview
Axiomatics Policy Server overview
What the Axiomatics Policy Server does: attribute-based authorization with XACML and ALFA policies, PDP, PEP and PIP, and its place in IAM.
- Platform category
Entitlement management
What entitlement management systems do: inventory permissions, govern grants and reviews, and enforce fine-grained authorization with policy engines.
- Platform category
Identity management systems
What identity management systems cover: identity governance and administration, directories, lifecycle automation, reviews, and how to evaluate them.
- Platform category
Jump-start: choosing an IAM platform
A step-by-step method for choosing an IAM platform: scenarios, deployment model, standards support, proof of concept and planning your exit.
- Platform category
Other tools in the identity stack
Supporting tools around IAM: directories, PKI and certificate management, secrets managers, HSMs and KMS, privileged access and testing tools.
- Product overview
PingFederate overview
What PingFederate is: Ping Identity's self-managed federation server for SAML, OpenID Connect and OAuth. Architecture, uses, hardening and alternatives.
- Product overview
PingOne overview
What PingOne is: Ping Identity's identity-as-a-service platform for SSO, MFA, risk and orchestration, including the Advanced Identity Cloud.
- Product overview
SiteMinder overview
What SiteMinder is: the web access management product Broadcom sells as Symantec SiteMinder. Policy server, agents, SSO sessions and migration paths.
Questions
Do you sell or resell any of these products?
No. Twobo Technologies is an independent educational site with no vendor partnerships. Pages that name a product describe it neutrally from public information; check the vendor's own documentation for current details.
Why are some specific products covered?
These pages keep addresses that once existed on this domain. They now hold neutral overviews of the product and, more usefully, of the category it belongs to.