ForgeRock

ForgeRock is an enterprise identity and access management platform now integrated into Ping Identity. Its former cloud service, ForgeRock Identity Cloud, is now named PingOne Advanced Identity Cloud.

The platform supports customer, workforce, partner, and business-to-business identities. Core capabilities include authentication, authorization, federation, single sign-on, lifecycle management, identity governance, directory services, API security, and user self-service.

ForgeRock products were renamed after Ping Identity and ForgeRock joined in August 2023. Former product names include ForgeRock Access Management, ForgeRock Identity Management, ForgeRock Directory Services, and ForgeRock Identity Gateway.

Access management supports authentication journeys, multi-factor authentication, passwordless methods, single sign-on, adaptive controls, OAuth 2.0, OpenID Connect, and SAML federation.

Identity management supports provisioning, reconciliation, synchronization, delegated administration, workflows, password management, access requests, access reviews, and identity lifecycle processes.

Identity Gateway connects web applications, APIs, microservices, and legacy services. It can operate as an HTTP gateway and supports API protection, request handling, SSO, OAuth 2.0, OpenID Connect, and SAML 2.0.

The platform exposes REST APIs for authentication, authorization decisions, OAuth administration, OpenID Connect, sessions, identity management, scripts, monitoring, and tenant administration.

Connectors synchronize identity data with directories, HR systems, SaaS applications, databases, and other external resources. Built-in and remote connectors are supported through the PingOne Open Connector Framework.

Developer tooling includes SDKs for Android, iOS, and JavaScript. The SDKs support authentication, OAuth 2.0, registration, profile self-service, and device self-service.

Ping Identity does not publish standard public prices for ForgeRock or PingOne Advanced Identity Cloud. The licensing model uses packages and add-ons, with pricing based on the selected capabilities and customer requirements.

Published licensing materials describe annual subscription packages for workforce deployments. Available packages can include core identity, access management, enterprise connectivity, identity gateway, lifecycle automation, access requests, workflows, and governance.

A public pricing calculator or fixed per-user rate was not verified. Prospective customers must contact Ping Identity for a quote and deployment evaluation.

Pros

• Broad coverage across customer, workforce, partner, and B2B identity scenarios.
• Supports SaaS, self-managed, private-cloud, public-cloud, and hybrid deployments.
• Provides standards-based federation through SAML, OAuth 2.0, and OpenID Connect.
• Includes REST APIs, SDKs, connectors, and orchestration capabilities.
• Supports both modern applications and legacy systems through Identity Gateway.

Cons

• Pricing is not publicly itemized and typically requires enterprise sales engagement.
• The product portfolio and documentation use both legacy ForgeRock and current Ping names.
• Advanced deployments can require specialist IAM, directory, API, and integration expertise.
• Some capabilities are packaged as separate add-ons rather than included in every subscription.
• Public independent review data was not sufficiently verified for a dependable rating.

Comparable products include Okta Workforce Identity and Customer Identity, Microsoft Entra ID, Auth0, WSO2 Identity Server, Keycloak, SailPoint Identity Security Cloud, and CyberArk Identity.

Okta and Microsoft Entra ID are common alternatives for workforce access and federation. Auth0 is primarily comparable for developer-focused customer identity. WSO2 and Keycloak provide self-managed identity-server options. SailPoint is more focused on identity governance and administration.

What is ForgeRock?
ForgeRock is an enterprise identity platform covering authentication, authorization, federation, identity management, governance, directories, APIs, and lifecycle automation.

Who owns ForgeRock?
Ping Identity owns and operates the ForgeRock product portfolio after the companies joined in August 2023.

What is ForgeRock Identity Cloud called now?
ForgeRock Identity Cloud is now called PingOne Advanced Identity Cloud.

Does ForgeRock provide an API?
Yes. The current Advanced Identity Cloud documentation describes REST APIs for identity management, authentication, authorization, OAuth, OpenID Connect, sessions, scripts, monitoring, and administration.

What integrations does ForgeRock support?
It supports connectors for directories, HR systems, SaaS applications, databases, and other external resources. Documentation also provides integration examples for Microsoft Entra ID, Salesforce, Okta, Active Directory, and Ping services.

Does ForgeRock offer a free trial?
A public, self-service free trial for ForgeRock or Advanced Identity Cloud was not verified. Ping provides evaluation agreements and sales-led demonstrations, but published pages do not confirm a universal free-trial duration or price.

Which platforms does ForgeRock support?
The platform is available through cloud and self-managed deployments. Its SDKs support Android, iOS, and JavaScript, while enterprise connectivity features include Windows workstation and remote-desktop scenarios.