FastPass IVM (Identity Verification Manager) vs. PingOne from Ping Identity

Having had attempts to break though the Help Desk calling as a fake user aking for a new password - the benefit is to keep social engeneering away from the Help Desk. IVM counters that issue.

The products we're using work well and are reliable. We've had very few outages, and when we have, their support team has been highly responsive and addressed the issues quickly. They are very customer focused and have been great partners throughout the relationship. I'm looking to adopt more of their technologies over the coming year.

• FastPass IVM (Identity Verification Manager) enable users to securely reset their passwords by verifying their identity using multi factor authentication
• An employee forgets their Active Directory password. Instead of calling the IT helpdesk, they go through a self-service portal where they verify themselves via an OTP

• PingFederate is feature-rich, and quickly updated with the latest standards and profiles. This gives us more tools to apply identity standards to modern business challenges.
• PingFederate and PingCentral were also easy to deploy within docker containers and weave into an infra-as-code deployment, keeping operational overhead low.
• PingID has an array of supported authenticators for nearly every use case, and early FIDO2 support has us looking into moving to passwordless much more quickly than I had anticipated.

Incentivized

• I believe it is very secure & not sure if it needs any improvement as such
• Only suggestion would be it should not ask users to re-confirm if the session is still active

Incentivized

Basically we have had a good implementation and it works

Easy to use; all UI's are user friendly and easy to learn.[The] possibility to use API is [a] big value as well. We really like integration with CyberArk; with it we can manage privileged accounts according to company standards without breaking any rules, and we can be 100% sure that only approved persons will have administrative access.

For our enterprise, they've assigned a customer success manager to ensure our needs are being addressed, and that person is top notch in knowing our priorities, enhancement requests, and open cases. Every time we've needed to engage support for a problem or a how-to question, they've been highly responsive and followed up with us to ensure the case was completely resolved. Their support personnel are highly skilled and trained. This is a very customer-centric company.

We tested PingOne but our security team was not happy with it (because of cloud exposure). We tested PingId as well but our security team was not happy with it (because of cloud exposure). We [spent] some time on PingDataGovernance but so far we don't have any use case for this product. We started exploration for PingDataSync (to synchronize two different LDAP directories), [and] so far it looks promising.

• it is positive with saving the cost
• some drawback with aging solution
• directory is solid and provide lots of cost saving

Incentivized