KuppingerCole Report
Executive View
By Ivan Niccolai


PingAccess is a web and API Access Management offering from Ping Identity. PingAccess is tightly integrated with PingFederate and provides a superior alternative to traditional Web Access Management products with its ability to provide policy- and context-driven access control to traditional on-premise web applications and cloud applications, as well as to REST-based APIs.
By Ivan Niccolai

1 Introduction

Major shifts in IAM/IAG (Identity Access Management/Governance) have been underway for some time now. The Computing Troika of Cloud, Mobile, and Social Computing creates new challenges. Different deployment models, new devices and mobile users, and more groups of users to deal with more closely are fundamentally changing the business demand for IAM/IAG. The good thing: There finally is strong demand not only from IT, Information Security, and Audit for IAM/IAG, but also from business.

However, there are also new challenges and new types of demand. The need for quickly on- and off-boarding business partners, giving access to business partner applications, managing access to the Cloud, integration of customers using various types of logins, etc. – all these are new challenges that extend the scope of IAM and IAG.

Cloud-based IAM has gone from being an emerging market offering innovative solutions, with concerns from some larger customers about the capabilities and maturity of these offers, to being an established market which now competes directly with the traditional IAM vendors. For example, in the area of federation and Web Access Management (WAM), cloud vendors offered solutions with strong capabilities for enabling single sign-on (SSO) to cloud application providers, but did not provide the same breadth of capabilities that traditional WAM products offered to protect and control access to on-premise web applications. Ping is a major player in the cloud IAM market, and its PingAccess product is clearly positioned as a replacement for legacy web access management (WAM) products.

From the KuppingerCole perspective, Cloud IAM must be complementary to existing on-premises IAM, enabling organizations to seamlessly extend the reach of their IAM to new groups of external users. Some organizations will rely fully on Cloud IAM solutions, but for most of them, it is about enhancing their existing infrastructures.

Ping Identity is an established pioneer in the market for Identity Federation and Cloud IAM. The company is highly engaged in standards initiatives, driving the development of standards in the field of IAM. Ping Identity provides three products: PingOne as a Cloud IAM solution; PingFederate as an on-premises Identity Federation product; and PingAccess as a Web Access Management solution with full support for managing Web and API-based access that is common in machine-to-machine communication such as access via mobile apps or the IoEE (Internet of Everything and Everyone).

PingAccess is a solution that specifically focuses next-generation, multi-channel access management for web-based resources, be they browser based or not. This means that it can provide seamless access control to either on-premise browser-based application such as an employee portal, or control federated access to a cloud-hosted application-as-a-service, a mobile application which uses REST APIs, or any type of resource which makes use of REST-based APIs. PingAccess is an Access Management solution which integrates with PingFederate as its authentication engine. Together with PingFederate, PingAccess provides an enterprise-grade Web Access Management solution that provides a lightweight approach for supporting more complex use cases, policies and integrations.

2 Service Description

While Ping is traditionally associated with “simple” cloud federation solutions, it is in reality the most mature vendor of comprehensive IAM prod ...

Login Get full Access

3 Strengths and Challenges

PingAccess is one of the leading solutions for seamless on-premise or Cloud-based WAM. It offers all major features for that group of products and adv ...

Login Get full Access


©2021 KuppingerCole Analysts AG all rights reserved. Reproduction and distribution of this publication in any form is forbidden unless prior written permission. All conclusions, recommendations and predictions in this document represent KuppingerCole´s initial view. Through gathering more information and performing deep analysis, positions presented in this document will be subject to refinements or even major changes. KuppingerCole disclaim all warranties as to the completeness, accuracy and/or adequacy of this information. Even if KuppingerCole research documents may discuss legal issues related to information security and technology, KuppingerCole do not provide any legal services or advice and its publications shall not be used as such. KuppingerCole shall have no liability for errors or inadequacies in the information contained in this document. Any opinion expressed may be subject to change without notice. All product and company names are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

KuppingerCole Analysts support IT professionals with outstanding expertise in defining IT strategies and in relevant decision-making processes. As a leading analyst ompany, KuppingerCole provides first-hand vendor-neutral information. Our services allow you to feel comfortable and secure in taking decisions essential to your business.

KuppingerCole, founded in 2004, is a global, independent analyst organization headquartered in Europe. We specialize in providing vendor-neutral advice, expertise, thought leadership, and practical relevance in Cybersecurity, Digital Identity & IAM (Identity and Access Management), Cloud Risk and Security, and Artificial Intelligence, as well as for all technologies fostering Digital Transformation. We support companies, corporate users, integrators and software manufacturers in meeting both tactical and strategic challenges and make better decisions for the success of their business. Maintaining a balance between immediate implementation and long-term viability is at the heart of our philosophy.

For further information, please contact clients@kuppingercole.com.