PingFederate Features

Process of providing credentials and logging into multiple systems is easy and intuitive for users

Supports required 3rd party Authentication Technologies. Example systems: bioMetric, passwords, key cards, token based systems, etc.

Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are.

Support SSO via Web agents, proxy agents, agent-less, SAML or oAuth and WS-Federation authentication and authorization Web services depending upon the application and business use case

Can serve as the identity provider to external service providers so that when the user logs into a service, instead of providing credentials to the service provider, the service provider trusts the identity provider to validate the credentials.

Can serve as the Service provider from an external service so that when the user logs in externally they have seamless SSO to internal applications from a service provider.

Provides ability to control access to PC's, Mobile devices, and other endpoint devices.

Controls access to legacy applications, web based applications, network resources and servers while employees are on the companies local area network.

Controls access to legacy applications, web based applications, networks resources while employees are outside the local area network.

Controls access to users that are not company employees that are either within the companies local area network or outside the network

Enables users to use their own device to access company applications.

Installation process is easy and flexible.

Options for resetting and enforcing password policies

Provides Administration tools/console that are easy to use and learn for routine maintenance tasks

Easily provisions new systems, platforms or applications using configuration and not customization.

Users can set, change passwords without interaction from IT staff

Standard and customized report creation to ensure appropriate access rights have been assigned

Provides mobile application that alerts administrators of potential issues and allows administrators manage access rights

Support for wide variety of cloud and on premise apps to automate provisioning for existing and new applications procured

Provides appropriate application interfaces to enable custom integrations for unique business requirements

Supports Endpoint access control to multiple operating systems

Allows user authentication to be honored by all the hosts in two or more domains

Support access to browser based applications across required browser types

Provides required failover mechanisms to ensure if one server, network, etc fails users are still able able to authenticate

Contains pre-built and custom reporting tools to required to manage business

Provides mechanism for auditing authentication for trouble shooting purposes.

Can call and pass credentials to third party web services.

Users can request access to an application and be automatically provisioned if they meet policy requirements

Automates account/access rights creation, changes and removals for on-premise and cloud apps

Establish roles that create a set of authentication rights for each user in the role

Enables administrators to create access policies and applies policy controls throughout request and provisioning processes

Terminate access to multiple applications based on dates

Allow business stake-holders/managers to approve or reject requested changes to access via a defined workflow

Enables users to reset passwords without administrator interaction. Enforces password policies when resetting.

Change users and permissions in bulk

Keep identity attributes consistent across applications whether the change is made in the provisioning system or the application

Alerts administrators when inappropriate access occurs

Proactively audits access rights against policies