


ForgeRock and Ping Identity Platform are competing in the identity management sector. ForgeRock seems to excel with its comprehensive features, while Ping Identity stands out with its strong deployment capabilities and customer satisfaction.
Features: ForgeRock offers rich customization options, dynamic profile management, and robust identity governance. It's well-suited for businesses needing detailed adaptability. Ping Identity focuses on seamless integration, intelligent access management, and ease of use for complex identity scenarios, which attracts organizations prioritizing streamlined operations.
Room for Improvement: ForgeRock could improve its deployment complexity and ease of integration. Additionally, enhancements in customer self-service features would be beneficial. Ping Identity may need to enhance its customization capabilities, expand beyond standard identity management tasks, and improve initial user guidance for complex setups.
Ease of Deployment and Customer Service: Ping Identity Platform is recognized for its straightforward deployment and excellent customer support, favoring businesses needing quick implementation. ForgeRock, though flexible, requires a more intricate deployment process, which can extend project durations.
Pricing and ROI: ForgeRock's pricing aligns with its broad feature set, leading to higher initial costs but offering significant long-term ROI through scalability. Ping Identity provides competitive ROI with lower upfront costs, appealing to businesses seeking immediate value without substantial initial investment.
We were able to implement zero trust extremely quickly because of the platform and its ongoing developments, including Cisco Duo Network Gateway, which enabled that transition to zero trust extremely quickly.
Not having MFA means you cannot put a price tag on that because you will be hit with ransomware immediately.
The biggest return on investment was the ease of use for the end users to have that secondary authentication when logging into the critical systems.
On a B2B level, it opened up the market for TomTom to sell its services in a more efficient way to car companies.
We can use a Linux image from ForgeRock with different systems, applications, websites, and mobile apps to create various types of access for users.
I can definitely see that fewer employees are needed compared to using different SaaS applications.
They got back to us quickly, were nice, and gave us what we needed.
I would rate their support 10 out of 10.
I would rate support for Cisco Duo a 10, as I have never had a negative experience.
The support portals offer comprehensive documentation, troubleshooting guides, and community forums that have been helpful for resolving common issues independently.
For standard support tickets, response times were very decent, and the support team was helpful in identifying configuration issues, especially with authentication trees, token settings, and directory replications.
The team is very responsive and takes a sense of ownership and accountability.
I have reached out to technical support for troubleshooting SAML certificate mismatches and federated errors between Ping and enterprise apps.
The problem with the support team is that I do not like support; the day of the threat image, they never come on the call and unless it is a priority, they never come to call to defend it and to provide any kind of solutions.
I would rate the technical support for Ping Identity Platform seven out of ten because of their limited support and late availability.
In my last contracting position, it was a large one for a major worldwide airline that had hundreds of thousands of devices that could use Cisco Duo, and it scaled very well.
You would not need many more engineers to manage Cisco Duo even if we scale up to 500 employees because it is so simple to manage.
Cisco Duo is scalable for organizational growth.
The access management layer is stateless, so I can scale horizontally by adding more nodes behind a load balancer as traffic increases.
The platform provides flexible authentication trees, enabling us to design custom MFA flows tailored for different user groups and risk profiles.
We scaled up with ForgeRock. My team received an award for implementing it for a 60 million customer base, which was the largest implementation at that time.
We have not had any Cisco Duo outages across all the companies I have worked for that utilize Cisco Duo.
The stability has been excellent.
I did not notice any downtime or crashes with Cisco Duo.
ForgeRock supports integration with legacy systems in our organization by offering a wide range of connectors and APIs.
ForgeRock is very stable because it manages access, authentication, and authorization effectively.
Ping Identity Platform demonstrates strong stability, as it is not prone to bugs.
In terms of stability for Ping Identity Platform, we haven't faced any issues till now.
Overall, I see PingFederate as a stable product.
If you don't have internet access, you can't access your computer, only local access is available.
It lacks some dynamic identity management features compared to other products such as SailPoint.
Not only has the product been very good and we have done fewer support cases, but I think support overall has been very fast.
ForgeRock needs to focus on low-code, no-code solutions that allow for drag-and-drop functionality with good orchestration.
It would be better if they were available for support whenever the customer needs it, especially during migration or go-live time periods.
The main area is complexity. ForgeRock is extremely flexible, but the learning curve can be steep.
I would like to enable ServiceNow Generative AI for auto-diagnosing PingFederate SSO failures and suggest remediation steps.
Ping Identity Platform has multiple products for access management, identity management, a solution for API security, a solution for authorization, and a product for identity verification.
There is a very limited number of legacy support, which can pose potential difficulties in integrating with certain older or legacy systems.
The pricing is acceptable to them.
Their website lists $3 per month per user for the Essential license.
One of my customers recently received a billing statement charging 3,600 US dollars for 100 users for one year.
One has to spend considerable time trying to understand the different modules and different needs for those modules on the licensing front.
Regarding pricing for Ping Identity Platform, I would rate it eight out of ten.
From a management perspective, I appreciate that we can enroll or control devices on the back end for people who get a new phone and forget to handle Cisco Duo properly and need to add a new device.
Our company benefits from all those features of Cisco Duo with confidence, and we feel very secure with it in terms of authentication of our logins.
The benefit of having a complete passwordless environment in our organization is that it's gotten people away from using the sticky note under their keyboard - which is a huge problem.
Centralized management makes the biggest difference because it allows us to define, update, and enforce security and compliance rules from a single location.
ForgeRock positively impacts our organization as we manage a large number of users with ease, providing a standard IAM solution that simplifies our processes.
ForgeRock has positively impacted my organization by allowing us to migrate from the older system to the newer ForgeRock component, enabling us to go live with many products across geographies, enhancing security as it is all cloud-based, and with the company taking care of availability, it has reduced costs for the company.
The platform enhances security measures by analyzing multi-factor authentication attempts, highlighting suspicious patterns, and generating compliance reports.
Ping Identity Platform can be accessed both on-premises and in the cloud, allowing for high flexibility in creating user flows and policies tailored to client requirements.
It's a converged platform which can do both identity management, access management, and recently they are bringing privilege management capability as well.
| Product | Mindshare (%) |
|---|---|
| Cisco Duo | 3.1% |
| Ping Identity Platform | 5.2% |
| ForgeRock | 3.4% |
| Other | 88.3% |


| Company Size | Count |
|---|---|
| Small Business | 66 |
| Midsize Enterprise | 29 |
| Large Enterprise | 92 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 5 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 12 |
| Midsize Enterprise | 2 |
| Large Enterprise | 22 |
Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.
Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to protect data effectively on VPNs, applications, and networks. Its single-pane management improves security processes while enhancing trust, making it suitable for diverse IT infrastructures.
What are the key features of Cisco Duo?
Which benefits and ROI should users consider?
In industries like education and finance, Cisco Duo is widely employed to secure multi-factor authentication across platforms such as email, databases, and servers. Its integration capabilities with Microsoft 365, Active Directory, and VPNs like AnyConnect are instrumental in verifying user identities using mobile apps or OTPs, catering effectively to both remote and on-premise environments.
ForgeRock offers robust integration, customization, and identity management with support for SAML, OAuth 2.0, and DevOps readiness, ensuring enhanced security and scalability.
ForgeRock stands out in identity and access management featuring flexible authentication flows, risk-based authentication, centralized policy management, and comprehensive data protection. Its open-source foundation and cloud capabilities allow versatility and ease of use. While it provides excellent user path orchestration through the Journey feature, challenges exist in integration support and user-friendly customization. Improved documentation and streamlined interfaces are necessary to overcome deployment complexities. Additionally, the cost and support model may be burdensome for smaller organizations.
What are the key features?ForgeRock is widely utilized in industries like telecommunications, insurance, and open banking for secure user authentication and access management. It supports microservice authentications, customer identity management, single sign-on, and multi-factor authentication, integrating effectively with existing infrastructures to enhance security and user experience.
Ping Identity Platform offers cloud capabilities for applications, supporting Single Sign-On, Multi-Factor Authentication, and passwordless authentication. It features flexible integrations and federated identity management, enhancing security through detailed compliance features and seamless IDP integration.
This platform meets enterprise needs with role-based access control, device management, API security, and risk-based adaptations. Its BYOD support, ease of integration, biometric authentication methods, and customizable options with PingFederate aid in enhancing security and convenience. Challenges such as the complex management console, network reliability, and limited customization are present. Users find areas for improvement in incident response features, bio-certification, and network handling for IP classification. Community support and documentation need strengthening to address existing device tracking and token management issues.
What are the key features of Ping Identity Platform?In industries such as finance, healthcare, and IT, enterprises deploy Ping Identity Platform for its ability to implement seamless SSO and MFA. It integrates with protocols like SAML, OAuth, and OpenID Connect to secure communications and user identities. This enhances security and user convenience for customer-facing and internal applications.
We monitor all Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.