PingOne from Ping Identity vs. Symantec IGA

The products we're using work well and are reliable. We've had very few outages, and when we have, their support team has been highly responsive and addressed the issues quickly. They are very customer focused and have been great partners throughout the relationship. I'm looking to adopt more of their technologies over the coming year.

If an organization is looking for a good comprehensive identity management/governance suite that is easy to implement, CA identity manager may be a good/robust product. It is best to understand specific use case for your organization and try out the product before a final purchase decision as is the case with all sw products.

Incentivized

• PingFederate is feature-rich, and quickly updated with the latest standards and profiles. This gives us more tools to apply identity standards to modern business challenges.
• PingFederate and PingCentral were also easy to deploy within docker containers and weave into an infra-as-code deployment, keeping operational overhead low.
• PingID has an array of supported authenticators for nearly every use case, and early FIDO2 support has us looking into moving to passwordless much more quickly than I had anticipated.

Incentivized

• It has complete identity management and governance capabilities equipped with a simple, intuitive user experience and helps simplify processes such as user access requests and access certifications. This in turn helps in improved productivity and user satisfaction.

Incentivized

• I believe it is very secure & not sure if it needs any improvement as such
• Only suggestion would be it should not ask users to re-confirm if the session is still active

Incentivized

• Bringing on new users and removing existing user when new employee/contractors join or leave an organization can be improved by linking directly to HR module.
• The slightly complicated GUI makes drill down difficult for a new user.

Incentivized

Easy to use; all UI's are user friendly and easy to learn.[The] possibility to use API is [a] big value as well. We really like integration with CyberArk; with it we can manage privileged accounts according to company standards without breaking any rules, and we can be 100% sure that only approved persons will have administrative access.

For our enterprise, they've assigned a customer success manager to ensure our needs are being addressed, and that person is top notch in knowing our priorities, enhancement requests, and open cases. Every time we've needed to engage support for a problem or a how-to question, they've been highly responsive and followed up with us to ensure the case was completely resolved. Their support personnel are highly skilled and trained. This is a very customer-centric company.

We tested PingOne but our security team was not happy with it (because of cloud exposure). We tested PingId as well but our security team was not happy with it (because of cloud exposure). We [spent] some time on PingDataGovernance but so far we don't have any use case for this product. We started exploration for PingDataSync (to synchronize two different LDAP directories), [and] so far it looks promising.

The final contenders were CA and Oracle - Oracle was tedious to implement and maintain while on the other hand CA was easy to implement and maintain and came at a much lower price.

Incentivized

• it is positive with saving the cost
• some drawback with aging solution
• directory is solid and provide lots of cost saving

Incentivized

• For us, it was a fairly easy implementation over 60 day period that provided ROI fairly quickly

Incentivized