Product overview · 1 min read
PingOne overview
Neutral overview. Twobo Technologies is not affiliated with, sponsored by or a reseller for Ping Identity or any other vendor. Product names belong to their owners; check the vendor's own documentation for current editions and licensing.
Short answer
PingOne is Ping Identity's cloud identity platform, offering services such as single sign-on, MFA, risk evaluation, identity verification, authorization and no-code orchestration, plus PingOne Advanced Identity Cloud, which grew out of ForgeRock's identity cloud after ForgeRock was combined into Ping Identity in 2023.
Key takeaways
- PingOne is delivered as a service; PingFederate is Ping's self-managed counterpart.
- Services are licensed and enabled separately, so check which ones a plan includes.
- Integration is through standard OIDC, SAML, OAuth and SCIM, plus vendor APIs.
PingOne is the cloud side of Ping Identity's portfolio. It belongs to the identity-as-a-service category, alongside offerings from Microsoft, Okta, Google and others.
What does PingOne include?
A set of cloud identity services built around a shared directory and environment model.
| Capability | Typical use |
|---|---|
| Single sign-on | OIDC and SAML sign-in to applications |
| MFA | Push, OTP, FIDO2 and passkeys |
| Risk and fraud signals | Adaptive authentication |
| Identity verification | Document and selfie checks during onboarding |
| Orchestration (DaVinci) | Visual design of sign-in and registration flows |
| Authorization | Policy-based decisions for applications and APIs |
| Advanced Identity Cloud | The former ForgeRock identity cloud, for large CIAM and workforce deployments |
Names and packaging change over time; check current documentation.
How do applications integrate?
With standard protocols: OpenID Connect and OAuth 2.0 for modern apps, SAML for SaaS, SCIM for provisioning.
Because integration is standards-based, the same techniques on this site apply: build test requests in the Authorization URL Builder, decode tokens in the JWT Decoder.
When is an identity cloud the right choice?
When you want to stop running identity infrastructure and your data residency and customization needs fit the service.
Compare with self-managed options using the platform selection guide. For the self-managed Ping product, see PingFederate.
Questions
Is PingOne a replacement for PingFederate?
It can replace it for some organizations, and many run both: PingFederate on-premises for legacy integrations and PingOne for cloud services. The vendor documents hybrid patterns.
What is PingOne Advanced Identity Cloud?
Ping Identity's name for the identity cloud service that came from ForgeRock, after Thoma Bravo combined ForgeRock into Ping Identity in 2023.