Try our new research platform with insights from 80,000+ expert users

ForgeRock vs Ping Identity Platform vs SailPoint Identity Security Cloud comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Access Management Market Share Distribution
ProductMarket Share (%)
ForgeRock6.8%
Microsoft Entra ID24.0%
Auth08.4%
Other60.8%
Access Management
Authentication Systems Market Share Distribution
ProductMarket Share (%)
Ping Identity Platform4.0%
Microsoft Entra ID12.9%
Cisco Duo8.1%
Other75.0%
Authentication Systems
User Provisioning Software Market Share Distribution
ProductMarket Share (%)
SailPoint Identity Security Cloud29.7%
Saviynt14.2%
One Identity Manager10.6%
Other45.5%
User Provisioning Software
 

Featured Reviews

Ahmet Murat Ülker - PeerSpot reviewer
Easy to use, but customizations can be complicated to handle
I would suggest others use the product after asking them to consider their use cases. SSO may be a use case for some, and using the product as an IDM tool may be a use case. At the moment, my company is not deploying all the components of ForgeRock itself. My company uses ForgeRock for OAuth 2.0. For example, my company is not deploying the IDM and identity gateway components. You should consider your use case and select the required components for that use case. My company does not use the SSO features of the tool. My company uses SSO to access ForgeRock's AM Console for individual users. My company does not use single sign on features of the product and instead, we use Auth0. I rate the tool a seven or eight out of ten.
MAHESHKUMAR7 - PeerSpot reviewer
Offers multi-factor authentication and application support side of PingFederate but application only supports specific protocols
A lot of teams work with technical support, but I work with it for user issues only. You might need support with things like application swaps, application names, and application URLs. I didn't know where to find those in Ping Identity, so I contacted technical support for those issues. The support team is very clever and active. They provide end-to-end support once an issue is created. I have worked with most of the support team. I also work with the support team because I work with the operations team. I provide 24/7 support to production and non-production environments. I coordinate with application and network teams to troubleshoot critical tickets and issues related to Ping Identity solutions.
Mitch MO - PeerSpot reviewer
Adapts workflows with industry-specific flexibility for big companies
We find flexibility to be one of the most valuable features. The solution can be customized to adapt the workflow to our industry, offering considerable flexibility. Additionally, it is considered a good solution for large companies due to its scalability and ability to cater to the needs of many customers. It has also enhanced security and provided significant flexibility for our specifications module.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It works very well, especially in Identity and Access Management. It helps detect anomalies in user behavior patterns."
"This is a stable solution. When you do experience any issues, you will see it in your DB logs or audit logs so you can easily reach a conclusion of might be causing it."
"We used it to implement multi-factor authentication and to improve our security posture as well as reducing the potential for attacks."
"The solution is very scalable. We have a lot of users that have been increasing over the years that we have been using it. We have approximately 20,000 users."
"The most valuable features are that it is easy to manage and it's stable."
"Installation and configuration are pretty easy for ForgeRock OpenIDM."
"The solution integrates well and it is important for them to keep up with the current trends in the market quickly enough, and they have been doing a good job at it."
"The solution's most valuable feature is the authentication for the consumers. The integration with other third-party applications is excellent."
"What I like best about PingID is that it's very user-friendly. PingID is well-built as a developer tool and regularly upgrades and updates via patches. I also like that PingID has clear documents that will help you integrate it with other solutions."
"It's convenient for users to log in through Ping using the Kerberos adapter because it doesn't require them to authenticate again."
"It is a scalable solution...It is a stable solution."
"People use the solution to secure their applications and authenticate particular processes."
"From a security perspective, I highly value the product's biometric authentication methods such as FIDO, FaceID, YubiKey, and the mobile app."
"We use the product to run different reports."
"PingFederate is very flexible. We can do many customizations, and it also provides an SDK to tailor it to our specific requirements. There are also numerous plugins available. I've worked with tools like ForgeRock and Okta, but I find PingFederate to be the most customizable."
"I would recommend PingFederate as an IAM solution for its no-code environment, single sign-on, multi-factor authentication, bidirectional services, and advanced features."
"SailPoint has an edge in terms of security since administrators have limited access, unlike ServiceNow where you can change everything. This adds a significant security advantage."
"A feature of SailPoint IdentityIQ that I like best is that it has good integration with other platforms. My company is using ADP here in Brazil, and SailPoint IdentityIQ works very, very well with it. My company is also using the solution for governance evaluation, segregation, and other access tests. For my company, SailPoint IdentityIQ is a very important solution, especially because it's automated, and there's a huge audit and risk issue here in Brazil."
"This solution is easy to configure."
"SailPoint IdentityIQ has a good and straightforward user interface. They also have a lot of resources and documentation available to understand the process."
"The community is very active and when I had questions about an issue, I was able to find the resources."
"The solution’s stability and performance are good."
"​The Certification and Provisioning features are most valuable."
"The initial setup isn't so difficult."
 

Cons

"I don't think ForgeRock directly supports integrations with Slack, making it an area where improvements are required."
"The solution's documentation is not very good, and they do not give more details."
"It should be a little bit easier to implement. It is user-friendly, but there is always scope for improvement."
"In an upcoming release, the solution could improve by limiting the need to do customizations."
"They should improve the solution by include reporting."
"It should have a better user interface. Its flexibility should also be improved. It is not about simplifying; it is more about flexibility. Each company has its own requirements, and ForgeRock can provide more flexibility in terms of the use of existing modules to implement features for the customers."
"The solution requires more simplified customization. However, part of the problem is my clients determining their own preferences. Technology can help and do many things, but you have to define your own policies to ensure that the solution or service works within those parameters. Helping customers understand their business and different processes is another issue not relating to the functionality of this solution."
"ForgeRock is an open source solution and is available to everyone but it is not freeware. If you need support, you need a subscription for ForgeRock. Many of its functionalities need to be built up with the help of a consultant."
"Currently, the main integration is SAML-based, but other integration methodologies need to be supported."
"If the solution is going to compete with Microsoft, they need to offer more unique functionality to keep their current user base."
"It has a long way to go until it is a cloud-based solution."
"In the beginning, the initial setup was very complex."
"The solution should allow for better integration with other platforms and the UBT."
"PingAccess can only have one token provider, and you cannot enable two different token providers simultaneously."
"One significant challenge was ensuring smooth user migration during system upgrades in Ping."
"Some colleagues have mentioned API connectivity, data security, and privacy issues."
"The product’s cloud offering could be flexible."
"The price of IdentityIQ could be lower. There are additional costs when you buy the licenses, and they force the customers to pay for them."
"The interface should be simple and easier to use."
"I would rate the vendor support around five out of ten. Sometimes, the support is slow, and they often suggest resorting to expert services."
"Compared to at least one other product some of the administrative tasks could be easier or more intuitive."
"SailPoint IdentityIQ could be cheaper."
"One needs to understand that SailPoint is into full-fledged IAM practice with a long-term vision, and customers will get a quick ROI with best practices implementation."
"The mover process for this solution could be improved."
 

Pricing and Cost Advice

"The pricing of the solution is fair but I do not have the full details."
"ForgeRock is an expensive solution."
"Its price is comparable to other products in the market."
"ForgeRock's pricing is more competitive than other products."
"It's a bit pricey and could be more competitive."
"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."
"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."
"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."
"The tool is quite affordable."
"The pricing is neither too expensive nor too cheap."
"PingID's pricing is pretty competitive."
"Ping Identity Platform is not very expensive."
"Compared to some SaaS-based solutions, the platform is relatively cost-effective."
"The product is costly."
"PingID pricing is a ten out of ten because it's a little bit cheaper than other tools, such as Okta and ForgeRock, and supports multiple tools."
"Ping Identity Platform is not an expensive solution."
"The pricing is based on the number of users and is reasonable."
"You are able to get discounts if you plan to use the tool for the long-term i.e. discounts for 5+ years of usage."
"Its price is okay. It provides good value for money. It is subscription-based. You can go for a one-year or three-year subscription."
"It's difficult to say that the solution saved costs because it is quite expensive."
"The licensing fees are on a yearly basis."
"I found the pricing to be relatively high."
"SailPoint IdentityIQ is too expensive for small and medium companies. It is an expensive product."
"You do pay one price for the license but that price depends on what you choose to include as far as the optional modules go."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
870,697 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
23%
Computer Software Company
11%
Manufacturing Company
8%
Insurance Company
6%
Financial Services Firm
24%
Computer Software Company
9%
Manufacturing Company
9%
Retailer
9%
Financial Services Firm
16%
Computer Software Company
13%
Manufacturing Company
9%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise4
Large Enterprise13
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise2
Large Enterprise20
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise8
Large Enterprise40
 

Questions from the Community

What do you like most about ForgeRock?
The most valuable features of ForgeRock are social login and data protection.
What is your experience regarding pricing and costs for ForgeRock?
Our company was considering switching back to Keycloak from ForgeRock, so as to not pay any license fees. ForgeRock a...
What needs improvement with ForgeRock?
In the past, I saw that Splunk was integrated with a testing portal, and then it was integrated with Slack. I don't t...
What do you like most about PingID?
The mobile biometric authentication option improved user experience. It's always about security because, with two-fac...
What is your experience regarding pricing and costs for PingID?
The pricing is neither too expensive nor too cheap.
What needs improvement with PingID?
The management console needs to be improved. PingID should revise it.
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to m...
What is your experience regarding pricing and costs for SailPoint IdentityIQ?
The product is expensive. People need to opt for a licensing plan for one year or three years.
What advice do you have for others considering SailPoint IdentityIQ?
You can use SailPoint Atlas to take identity security to the next level. In SailPoint IIQ, writing a custom connector...
 

Also Known As

ForgeRock Identity Platform, ForgeRock OpenIDM
Ping Identity (ID), PingFederate, PingAccess, PingOne, PingDataGovernance, PingDirectory, OpenDJ
IdentityIQ, IdentityNow, Cloud Infrastructure Entitlement Management, Intello
 

Overview

 

Sample Customers

Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University
Equinix, Land O'Lakes, CDPHP, Box, International SOS, Opower, VSP, Chevron, Truist, Academy of Art University, Northern Air Cargo, Repsol
Adobe, AXA Technology Services, Cuna Mutual Group, Equifax, ING Direct, Orrstown Bank, Rockwell Automation, SallieMae, Spirit Aerosystems, TEL
Find out what your peers are saying about Microsoft, Okta, Ping Identity and others in Access Management. Updated: September 2025.
870,697 professionals have used our research since 2012.