Ping Identity IAM Provider

Enterprise-grade IAM/CIAM with no-code DaVinci orchestration, PingOne Protect AI-driven security, and the broadest deployment flexibility (SaaS, self-hosted, hybrid).

Features

Authentication Methods

Username and Password
Social Sign-in
Passkey
Email Passwordless
Phone Passwordless
Magic Link
Anonymous / Guest

Integration Protocols

OpenID Connect (OIDC)
SAML 2.0
WS-Federation
Machine-to-Machine (M2M) Authentication

Identity Federation

OpenID Connect (OIDC) Federation
SAML 2.0 Federation
Active Directory / LDAP
Azure Active Directory (Entra ID)

Access Control & Authorization

Attribute-Based Access Control (ABAC)
Fine-Grained Authorization (FGA / ReBAC)
API Authorization (Scopes / Permissions)

Security

Audit Log Retention
Audit Log Streaming
Security Center (Threat Monitoring Dashboard)
Encryption at Rest
Encryption in Transit
Customer Managed Keys (BYOK)
Bot Detection
Brute Force Protection
Suspicious IP Throttling
Breached Password Detection
Credential Guard (Dark Web Monitoring)
Tenant Access Control List (IP ACL)
Device Fingerprinting

Multi-Tenancy / Organizations

Per-Organization Branding
Per-Organization MFA Policy

Branding & UX

Hosted / Universal Login Page
Embedded / Native Login Components
White-Label / Full Brand Removal
Localization / i18n
Prebuilt UI Components (SDK)

Compliance

SOC 2 Type II Certification
ISO 27001 / 27017 / 27018 Certification
HIPAA Business Associate Agreement (BAA)
PCI DSS Compliance
CSA STAR Certification
FedRAMP Authorization
GDPR: Data Export (Portability)
GDPR: Right to be Forgotten (User Deletion)
Consent Management
Region Deployment
Private Cloud Deployment
AWSAzureGCP

Developer Integration

SDK Coverage
Management API
Authentication API Rate Limits
Actions / Extensibility Pipeline
TypeScript Support in Extensibility
Custom Domain
Deploy CLI (Infrastructure as Code)
Terraform Provider
Custom Database Connections
Native Webhook Support
Universal Login / Hosted Login Page Customization
Custom Email Provider (SMTP)
Email Templates
Custom OIDC Claims / Token Enrichment

Advanced / Differentiators

No-Code Auth Flow Builder / Orchestration
Identity Verification / Document Proofing
Decentralized / Verifiable Credentials
Built-in Billing / Subscription Management
Agentic AI / MCP Server Authentication

If you want to compare IAM features of different providers, please check out the (C)IAM Identity Providers benchmark.

Looking for Ping Identity’s OpenID Connect protocol compatibility? View Ping Identity on the OpenID Connect Providers benchmark.

Frequently Asked Questions

Does Ping Identity support Username and Password authentication method?

Ping Identity supports Username and Password authentication method. Read more

Does Ping Identity support Social Sign-in authentication method?

Ping Identity supports Social Sign-in authentication method. Read more

Does Ping Identity support Passkey authentication method?

Ping Identity supports Passkey authentication method. Read more

Does Ping Identity support Email Passwordless authentication method?

Ping Identity supports Email Passwordless authentication method. Read more

Does Ping Identity support Phone Passwordless authentication method?

Ping Identity supports Phone Passwordless authentication method. Read more

Does Ping Identity support Magic Link authentication method?

Ping Identity supports Magic Link authentication method. Read more

Does Ping Identity support Anonymous / Guest authentication method?

Ping Identity does not support Anonymous / Guest authentication method.

Does Ping Identity support Time-based One-Time Password (TOTP) MFA?

Ping Identity supports Time-based One-Time Password (TOTP) MFA. Read more

Does Ping Identity support HMAC-based One-Time Password (HOTP) MFA?

Ping Identity supports HMAC-based One-Time Password (HOTP) MFA. PingID supports HOTP (counter-based OTP) in addition to TOTP, also used for offline PingID authentication. Read more

Does Ping Identity support Universal 2nd Factor (U2F) MFA?

Ping Identity supports Universal 2nd Factor (U2F) MFA. FIDO2 security keys with backward compatibility for U2F. Read more

Does Ping Identity support WebAuthn MFA?

Ping Identity supports WebAuthn MFA. Read more

Does Ping Identity support Email Code MFA?

Ping Identity supports Email Code MFA. Read more

Does Ping Identity support Phone Code MFA?

Ping Identity supports Phone Code MFA. Read more

Does Ping Identity support Recovery Code MFA?

Ping Identity supports Recovery Code MFA. Recovery codes supported in PingOne Advanced Identity Cloud and via admin device reset in PingID. Read more

Does Ping Identity support Push Notification MFA?

Ping Identity supports Push Notification MFA. PingID push notifications. Read more

Does Ping Identity support Adaptive / Risk-Based MFA MFA?

Ping Identity supports Adaptive / Risk-Based MFA MFA. PingOne Protect AI-driven risk-based adaptive MFA. Read more

Does Ping Identity support Cisco Duo MFA?

Ping Identity supports Cisco Duo MFA. Cisco Duo integration via the Duo Security Integration Kit for PingFederate and a Duo Connector for PingOne DaVinci. Read more

Does Ping Identity support Step-Up Authentication MFA?

Ping Identity supports Step-Up Authentication MFA. Read more

Does Ping Identity support OpenID Connect (OIDC) integration protocol?

Ping Identity supports OpenID Connect (OIDC) integration protocol. Read more

Does Ping Identity support SAML 2.0 integration protocol?

Ping Identity supports SAML 2.0 integration protocol. Read more

Does Ping Identity support WS-Federation integration protocol?

Ping Identity supports WS-Federation integration protocol. PingFederate supports full WS-Federation Passive Requestor Profile, including interoperability with Microsoft ADFS. Read more

Does Ping Identity support Machine-to-Machine (M2M) Authentication integration protocol?

Ping Identity supports Machine-to-Machine (M2M) Authentication integration protocol. Read more

Does Ping Identity support OpenID Connect (OIDC) Federation identity federation?

Ping Identity supports OpenID Connect (OIDC) Federation identity federation. Read more

Does Ping Identity support SAML 2.0 Federation identity federation?

Ping Identity supports SAML 2.0 Federation identity federation. Read more

Does Ping Identity support Active Directory / LDAP identity federation?

Ping Identity supports Active Directory / LDAP identity federation. PingDirectory and PingFederate LDAP connectors. Read more

Does Ping Identity support Azure Active Directory (Entra ID) identity federation?

Ping Identity supports Azure Active Directory (Entra ID) identity federation. Native integration: PingOne can act as external MFA for Entra ID, provision users from Entra via MS Graph, and use Entra as OIDC provider. Read more

Does Ping Identity support Bulk User Import user management?

Ping Identity supports Bulk User Import user management. Read more

Does Ping Identity support Password Hash Import (Multiple Formats) user management?

Ping Identity supports Password Hash Import (Multiple Formats) user management. Read more

Does Ping Identity support Bulk User Export user management?

Ping Identity supports Bulk User Export user management. Read more

Does Ping Identity support Bulk User Update / Delete user management?

Ping Identity supports Bulk User Update / Delete user management. Read more

Does Ping Identity support Upsert on Import user management?

Ping Identity supports Upsert on Import user management. Bulk import supports conflict handling with upsert semantics. Read more

Does Ping Identity support Legacy Username Import (Non-Allowed Characters) user management?

Ping Identity supports Legacy Username Import (Non-Allowed Characters) user management. PingOne import API treats usernames as plain string fields with minimal restrictions at import time. Read more

Does Ping Identity support MFA Enrollment Import user management?

Ping Identity supports MFA Enrollment Import user management. TOTP secrets and phone numbers can be set via the PingOne MFA API during migration. Read more

Does Ping Identity support Inbound SCIM Provisioning user management?

Ping Identity supports Inbound SCIM Provisioning user management. Read more

Does Ping Identity support Outbound SCIM Provisioning user management?

Ping Identity supports Outbound SCIM Provisioning user management. Read more

Does Ping Identity support SCIM Groups Provisioning user management?

Ping Identity supports SCIM Groups Provisioning user management. Read more

Does Ping Identity support Just-In-Time (JIT) User Provisioning user management?

Ping Identity supports Just-In-Time (JIT) User Provisioning user management. Read more

Does Ping Identity support Lazy / Trickle Migration from Legacy Database user management?

Ping Identity supports Lazy / Trickle Migration from Legacy Database user management. Read more

Does Ping Identity support Self-Service Profile Management Portal user management?

Ping Identity supports Self-Service Profile Management Portal user management. Read more

Does Ping Identity support User Account Linking user management?

Ping Identity supports User Account Linking user management. Read more

Does Ping Identity support User Blocking / Banning user management?

Ping Identity supports User Blocking / Banning user management. Read more

Does Ping Identity support User Metadata user management?

Ping Identity supports User Metadata user management. Read more

Does Ping Identity support Application Metadata user management?

Ping Identity supports Application Metadata user management. Admin-managed custom attributes prefixed with `custom_` on user objects, accessible via API. Read more

Does Ping Identity support Metadata Size Limits user management?

Ping Identity supports Metadata Size Limits user management. Up to 200 custom string and JSON attributes per environment. Read more

Does Ping Identity support User Search user management?

Ping Identity supports User Search user management. Read more

Does Ping Identity support Role-Based Access Control (RBAC) user management?

Ping Identity supports Role-Based Access Control (RBAC) user management. Read more

Does Ping Identity support Organizations (Multi-Tenancy B2B) user management?

Ping Identity supports Organizations (Multi-Tenancy B2B) user management. Read more

Does Ping Identity support Password Strength Policies user management?

Ping Identity supports Password Strength Policies user management. Built-in password policy templates (Standard, Passphrase, Basic) with configurable complexity. Read more

Does Ping Identity support Username Restrictions user management?

Ping Identity supports Username Restrictions user management. PingOne enforces username policies including MIN_LENGTH, VALID_TYPE, UNIQUE, and CANNOT_CONTAIN_CHARACTERS. Read more

Does Ping Identity support Progressive Profiling / Forms user management?

Ping Identity supports Progressive Profiling / Forms user management. Read more

Does Ping Identity support Attribute-Based Access Control (ABAC) access control?

Ping Identity supports Attribute-Based Access Control (ABAC) access control. Read more

Does Ping Identity support Fine-Grained Authorization (FGA / ReBAC) access control?

Ping Identity supports Fine-Grained Authorization (FGA / ReBAC) access control. PingOne Authorize add-on. Read more

Does Ping Identity support API Authorization (Scopes / Permissions) access control?

Ping Identity supports API Authorization (Scopes / Permissions) access control. Read more

Does Ping Identity support Audit Log Retention security feature?

Ping Identity supports Audit Log Retention security feature. Read more

Does Ping Identity support Audit Log Streaming security feature?

Ping Identity supports Audit Log Streaming security feature. Read more

Does Ping Identity support Security Center (Threat Monitoring Dashboard) security feature?

Ping Identity supports Security Center (Threat Monitoring Dashboard) security feature. PingOne Protect has a dedicated Threat Protection Dashboard under Monitoring → Threat Protection. Read more

Does Ping Identity support Encryption at Rest security feature?

Ping Identity supports Encryption at Rest security feature. Read more

Does Ping Identity support Encryption in Transit security feature?

Ping Identity supports Encryption in Transit security feature. Read more

Does Ping Identity support Customer Managed Keys (BYOK) security feature?

Ping Identity supports Customer Managed Keys (BYOK) security feature. Supported in Advanced Identity Cloud via ESV-mapped signing/encryption keys. Self-hosted PingFederate/PingDirectory gives full key control. Read more

Does Ping Identity support Bot Detection security feature?

Ping Identity supports Bot Detection security feature. PingOne Protect AI-driven bot detection. Read more

Does Ping Identity support Brute Force Protection security feature?

Ping Identity supports Brute Force Protection security feature. Read more

Does Ping Identity support Suspicious IP Throttling security feature?

Ping Identity supports Suspicious IP Throttling security feature. Read more

Does Ping Identity support Breached Password Detection security feature?

Ping Identity supports Breached Password Detection security feature. Read more

Does Ping Identity support Credential Guard (Dark Web Monitoring) security feature?

Ping Identity does not support Credential Guard (Dark Web Monitoring) security feature. No dedicated dark web monitoring product. Breached password detection via PingOne Protect covers known credential compromise checking.

Does Ping Identity support Tenant Access Control List (IP ACL) security feature?

Ping Identity supports Tenant Access Control List (IP ACL) security feature. PingOne Advanced Identity Cloud Proxy Connect provides IP-based access control and HTTP header rules restricting network access per tenant environment. Read more

Does Ping Identity support Device Fingerprinting security feature?

Ping Identity supports Device Fingerprinting security feature. Read more

Does Ping Identity support Per-Organization Branding multi-tenancy?

Ping Identity supports Per-Organization Branding multi-tenancy. Read more

Does Ping Identity support Per-Organization MFA Policy multi-tenancy?

Ping Identity supports Per-Organization MFA Policy multi-tenancy. Read more

Does Ping Identity support Hosted / Universal Login Page branding feature?

Ping Identity supports Hosted / Universal Login Page branding feature. Read more

Does Ping Identity support Embedded / Native Login Components branding feature?

Ping Identity supports Embedded / Native Login Components branding feature. Read more

Does Ping Identity support White-Label / Full Brand Removal branding feature?

Ping Identity supports White-Label / Full Brand Removal branding feature. Read more

Does Ping Identity support Localization / i18n branding feature?

Ping Identity supports Localization / i18n branding feature. Read more

Does Ping Identity support Prebuilt UI Components (SDK) branding feature?

Ping Identity supports Prebuilt UI Components (SDK) branding feature. Read more

Does Ping Identity support Login / Auth Analytics Dashboard analytics?

Ping Identity supports Login / Auth Analytics Dashboard analytics. Read more

Does Ping Identity support SOC 2 Type II Certification compliance?

Ping Identity supports SOC 2 Type II Certification compliance. Read more

Does Ping Identity support ISO 27001 / 27017 / 27018 Certification compliance?

Ping Identity supports ISO 27001 / 27017 / 27018 Certification compliance. Ping Identity holds ISO 27001, ISO 27017, and ISO 27018 certifications. Read more

Does Ping Identity support HIPAA Business Associate Agreement (BAA) compliance?

Ping Identity supports HIPAA Business Associate Agreement (BAA) compliance. PingOne Advanced Identity Cloud complies with HIPAA/HITECH. Read more

Does Ping Identity support PCI DSS Compliance compliance?

Ping Identity supports PCI DSS Compliance compliance. Self-hosted/on-premises PingFederate + PingDirectory deployment can be configured for PCI DSS. Read more

Does Ping Identity support CSA STAR Certification compliance?

Ping Identity supports CSA STAR Certification compliance. Ping Identity holds CSA STAR Level 2 Attestation. Read more

Does Ping Identity support FedRAMP Authorization compliance?

Ping Identity supports FedRAMP Authorization compliance. Ping Government Identity Cloud is FedRAMP High authorized and DoD IL5 certified. Read more

Does Ping Identity support GDPR: Data Export (Portability) compliance?

Ping Identity supports GDPR: Data Export (Portability) compliance. Read more

Does Ping Identity support GDPR: Right to be Forgotten (User Deletion) compliance?

Ping Identity supports GDPR: Right to be Forgotten (User Deletion) compliance. Read more

Does Ping Identity support Consent Management compliance?

Ping Identity supports Consent Management compliance. Read more

Does Ping Identity support Region Deployment compliance?

Ping Identity supports Region Deployment compliance. SaaS multi-region plus self-hosted option for full control. Read more

Does Ping Identity support Private Cloud Deployment compliance?

Ping Identity supports Private Cloud Deployment compliance. PingOne runs on AWS; PingFederate self-hosted deployable on any cloud. Read more

Does Ping Identity support SDK Coverage developer integration?

Ping Identity supports SDK Coverage developer integration. Read more

Does Ping Identity support Management API developer integration?

Ping Identity supports Management API developer integration. Read more

Does Ping Identity support Authentication API Rate Limits developer integration?

Ping Identity supports Authentication API Rate Limits developer integration. Read more

Does Ping Identity support Actions / Extensibility Pipeline developer integration?

Ping Identity supports Actions / Extensibility Pipeline developer integration. DaVinci orchestration flows and scripted hooks. Read more

Does Ping Identity support TypeScript Support in Extensibility developer integration?

Ping Identity does not support TypeScript Support in Extensibility developer integration. DaVinci Code Snippet and Functions connectors use JavaScript only, not TypeScript.

Does Ping Identity support Custom Domain developer integration?

Ping Identity supports Custom Domain developer integration. Read more

Does Ping Identity support Deploy CLI (Infrastructure as Code) developer integration?

Ping Identity supports Deploy CLI (Infrastructure as Code) developer integration. Ping CLI (pingcli) supports platform export with Terraform HCL output for IaC workflows. Read more

Does Ping Identity support Terraform Provider developer integration?

Ping Identity supports Terraform Provider developer integration. Read more

Does Ping Identity support Custom Database Connections developer integration?

Ping Identity supports Custom Database Connections developer integration. Read more

Does Ping Identity support Native Webhook Support developer integration?

Ping Identity supports Native Webhook Support developer integration. Read more

Does Ping Identity support Universal Login / Hosted Login Page Customization developer integration?

Ping Identity supports Universal Login / Hosted Login Page Customization developer integration. Read more

Does Ping Identity support Custom Email Provider (SMTP) developer integration?

Ping Identity supports Custom Email Provider (SMTP) developer integration. PingOne allows configuration of a custom SMTP server or MS Graph API email provider. Read more

Does Ping Identity support Email Templates developer integration?

Ping Identity supports Email Templates developer integration. Read more

Does Ping Identity support Custom OIDC Claims / Token Enrichment developer integration?

Ping Identity supports Custom OIDC Claims / Token Enrichment developer integration. Read more

Does Ping Identity support No-Code Auth Flow Builder / Orchestration feature?

Ping Identity supports No-Code Auth Flow Builder / Orchestration feature. DaVinci drag-and-drop no-code orchestration. Read more

Does Ping Identity support Identity Verification / Document Proofing feature?

Ping Identity supports Identity Verification / Document Proofing feature. PingOne Verify with document and biometric verification. Read more

Does Ping Identity support Decentralized / Verifiable Credentials feature?

Ping Identity supports Decentralized / Verifiable Credentials feature. PingOne Neo verifiable credentials. Read more

Does Ping Identity support Built-in Billing / Subscription Management feature?

Ping Identity does not support Built-in Billing / Subscription Management feature.

Does Ping Identity support Agentic AI / MCP Server Authentication feature?

Ping Identity supports Agentic AI / MCP Server Authentication feature. Identity for AI (Agent IAM Core, Agent Gateway, Agent Detection via PingOne Protect) launched GA on March 24, 2026. Supports MCP OAuth 2.0 authorization for AI agents. Read more

Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.