ForgeRock Reviews

If for example, you click on facebook.com, the request goes from your browser to the application server. On the application server, one of the gateways may block your request. First it enters the firewall and then it reaches the application server where Facebook is deployed and it reaches a policy enforcement point. This policy enforcement point (PEP) would be the web agent.

This request is blocked by this PEP, and it asks the basic first question of whether the URL is protected. The user then provides their credentials on their login screen and again, this PEP takes up this request to PDP and asks whether this user is authenticated to access this service. The credentials are checked in a user store. 

So as soon as it checks your credentials, it gives back an answer to the policy decision point that this user is available in the user store. ForgeRock answers all these questions using its own codes.

We could previously make Authorization policies, and based upon these policies, only provide the access to certain resources. Right now our identity is not limited to just people but also items such as a smart refrigerator and a smart car.

This entire login flow or registration flow is now taken care of by intelligence authentication. Almost all the notes which are required for these journeys are out of the box. If you want to enable biometrics, you can get these notes from ForgeRock marketplace. This is one of the features which I like the most about this solution. Most technologies are out of the box or require a minimum configuration.

ForgeRock is an open source solution and is available to everyone but it is not freeware. If you need support, you need a subscription for ForgeRock. Many of its functionalities need to be built up with the help of a consultant.

There are some limitations and some issues. It requires you to create a code ticket and then work on it with ForgeRock. In a future release, we would like to add additional security to our environment. We would also like to have identity and access management technology for passwordless logins. 

I have been using this solution for five years.

This is a stable solution. When you do experience any issues, you will see it in your DB logs or audit logs so you can easily reach a conclusion of might be causing it.

This is a scalable solution. To add multiple users to the environment, you can enable a self-service access for user registration, a ForgeRock password and ForgeRock username. A user can do this by themselves. This solution also has a high data capacity. You can use the directive service as a replication server as well to replicate your user data between different directive services environment. 

I would rate the support for this solution a three out of five because you can't depend entirely on them. You have to try troubleshooting by yourself as well. 

Neutral

I have been working on other IAM products since the start of my career eight years ago. I have been using ForgeRock for the past five years.

The initial setup is out of the box and simple, especially if you are creating a basic user journey with a registration and login. If you are going with an identity gateway, it may require some basic understanding about the technology.

To deploy it from start to finish, took six to seven months.

You can get an environment once you register on their site with your ID, and you will get a whole lot of downloads. If you enable ForgeRock on a consumer level, then you have to pay for it.

Go to forgerock.com and create your ID. After that, you can complete multiple self-led trainings. There are documents which are very thorough. I would certainly recommend this solution to others. Onboarding on ForgeRock is quite easy. 

I have been working on all the products of ForgeRock and I have worked on other products of the same category.

I would rate this solution an eight out of ten.

ForgeRock is basically an IAM tool and we use it for access to multiple resources or applications. It's basically an identity and access management tool. We are business partners with ForgeRock and I'm a security delivery analyst.

It's had a good impact and we've seen an increase in revenue. 

I like the ease of navigating, handling and managing the applications and end-user profiles. It's easy, convenient and affordable. 

ForgeRock can be a complex product that requires a lot of time to learn and  understand its real value. The issue is that when we're working in real-time scenarios for real-time projects, we might face challenges that we're not able to figure out ourselves. By the time we have real-time interaction with the customer, it can be awkward to go back to the documentation and try to figure it out. I'd like the solution to include ways of customizing or achieving our scenarios more simply. That could include simplified documentation within the tool rather than having to use a separate portal. If something were available within the tool, I would be happy.

I've been using this solution for close to three years. 

This is a neutral product in terms of stability. It's generally fine but sometimes there are issues which could be connected to the application rather than the product.

The solution scales up and down according to your needs.

We receive adequate support. Every time we reach out to them, they're there for us. Whether it's relevant documentation, guidance, or jumping on a call to troubleshoot issues. They're on top when it comes to customer support. 

The initial setup is easy but I would recommend having some knowledge on the container, where you deploy the applications, and how it's done.

ForgeRock is an open-source tool. You can download it directly via the browser. It's only when you want to use their extensive features, you might have to think about the pricing. ForgeRock is booming because it's an open-source tool and it provides good value. It's comparable to a licensed solution. We pay a maintenance fee. 

We initially used ForgeRock as a trial tool to test whether we could achieve all of our requirements. It was a good strategy for us. 

I rate the solution eight out of 10. 

We primarily use the solution for multiple clients and multiple implementations.

Fundamentally, we're not using ForgeRock as a single application Identity Management Solution. We need it for multiple clients, multiple implementations. Not all of them are necessarily a multi-tenant solution. We need a very versatile solution that can do a lot of work, but from a single instance that we can centralize authentications and we don't duplicate the efforts and that's where ForgeRock seems to do better.

We need some more time with the solution to really note if there are specific features that are missing. Currently, it's doing a good job of covering what we need.

We're worried about the scaling. We're told it will be okay and there won't be issues, however, I'm not 100% convinced.

We've signed the contract and yet we're still not going through the typical process, which is worrying.

We started using the solution a few months ago.

It's been only two, three months. So far, we haven't seen any issues and I'm not sure if we will have any issues in the next year or so. 

However, as we move, my biggest concern in the past and right now is when we start adding multiple clients to the same base setup. That's where I'm more worried about how it will take individual authentication versus claims level authentication. I wonder about how it's going to handle all of that. That's where I'm more worried. I'm patiently waiting for a few clients to be on the platform. 

I'm worried about the scalability of it. I'm not worried about the scalability itself. I'm sure it will scale. However, I'm concerned about what sorts of problems we'll run into when we start scaling the solution higher. Right now it's very low volume.

They have assured me it will be fine. We just got a new Account Manager assigned to my company and she's assured me that any such problems and they will be able will align with their standard scalability structures. She has assured me that if there are any issues, their team would jump in and make sure that our clients are not going to be impacted by any issues we might end up having.

We're still in the honeymoon phase with ForgeRock. Even though we have very small business interests with them today, they see that we plan on growing drastically over the next two years. Therefore, we have excellent support and we are now at a point where we are not calling tech support. We pick up a phone and call the Account Manager and they'll get everything resolved for us. We don't have to queue along with everybody else and go through a long process. Maybe it will be different once we are around for a while. However, since we are a growing account, we are an enterprise account, and the Account Manager is really new, we are being treated a little bit differently than regular customers. Obviously, I don't expect it to be this red carpet a year down the lane. That said, right now, it's very nice.

We did previously use a different solution. Scalability and consolidated implementation was one of the reasons we had the previous product. However, I can't even remember the name of it. With the previous product, the problem was we had to put a base set up for every client differently when it is not a multi-tenant solution. That was one of the reasons we switched to ForgeRock. Even though the implementations are not multi-tenant, we can re-route all the IT management through ForgeRock at this point in time.

The initial setup wasn't too complex. I didn't think it was any difficult. I sometimes believe I don't give enough credit to my team. Some of my team members have upwards of about 20 years experience in doing this. They're doing these types of implementations all of the time and they make it seem very easy. I haven't heard a single problem from them. They seem to have handled the entire process very well.

In terms of usage, it's not our standard cost. We're not doing it for our purpose. We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years. We expect that to double, at least based on how many solutions we scale to. The amount of money we spend on ForgeRock will depend on the number of clients we get. Right now it is on one product, so it is not that much currently. If we scale it to other products, that number will change drastically.

We are just customers. We don't have a business relationship with the solution.

I don't have the details in regards to which version of the solution we're using.

My advice to other potential users would be to not look at the cost savings when you scale. Instead, look at the issues you will run into when you scale. If you plan for scaling two years down the line, the mistake we made a couple of times in other solutions was that it was actually more expensive when you scale without the architecture properly done. Therefore, take the time to plan ahead.

Currently, I'd rate the solution at a seven. I'm a little worried that, even though we've signed the contract, we are being channeled through a couple of leaders rather than going through the regular process. I'm worried about how that new process is going to be for us.

There are multiple use cases including multi-factor authentication that enable more integration on the application stack. There's also the CIAM methodology with the single sign-on, the SAML integration and the federation for business to business. We are partners with ForgeRock and I'm an SME. 

The valuable feature of the product is that it's easy to customize and adaptable to any environment. We can use the leverage acknowledgment of an intellectual capture and make an out-of-the-box complex solution. 

Steep learning curve: As with any complex software platform, there is a learning curve to using ForgeRock, and it may require specialized expertise to implement and manage effectively.

I've been using ForgeRock Access Manager for 22 years since Sun Microsystems released the source code of OpenAM from Iplanet-DSAME.

The solution is very scalable and offers three kinds of architecture; small, medium and large. That means you can start with one million users, and scale up to 10 million. The only limitation is the platform. 

The deployment is straightforward and doesn't take a lot of time. There's a lot of documentation available. It's a matter of defining the process. 

Once you know your needs, licensing is very flexible and adaptable with any kind of solution and works with any size of organization. 

This is a good product with good technology that's easy to integrate. Follow the best practice and it works well. 

I rate this product 10 out of 10. 

We are using ForgeRock for our CRM system.

In our company, we had some SQL legacy databases but with ForgeRock there is much more integration, including outside the system.

The solution could improve by adding more advertising and marketing.

I have been using ForgeRock for approximately one and a half years.

The solution is stable.

I rate the stability of ForgeRock an eight out of ten.

You are able to build on ForgeRock, it is scalable.

I rate ForgeRock an eight out of ten.

The support is good and prompt.

The initial setup of ForgeRock can be complex based on what kind of integration nodes we are connecting.

We did the deployment of ForgeRock in-house.

I rate ForgeRock a nine out of ten.

We use the solution for the authorization and authentication of various applications.

The solution has the ability to handle a lot of users.

In an upcoming release, the solution could improve by limiting the need to do customizations.

I have been using the solution for more than three years. 

I find the solution to be stable, it has been working well. However, we have encountered some stability issues when we tried to upgrade. Normally we would have to reboot the server and occasionally have performance and tunning issues. The solution's stability during the upgrade should be improved.

The solution is very scalable. We have a lot of users that have been increasing over the years that we have been using it. We have approximately 20,000 users.

Whenever we experience an incident, we call everyone in the breach and the system owner expert will call the support of the solution. The support could improve because we sometimes have to repeat ourselves since the support is across different time zones.

The initial setup of the solution was quite complex because we tried to use it as a Single Sign-On with multiple applications or customers. 

The solution requires a vendor consultant for the implementation to make the right choices. 

The pricing of the solution is fair but I do not have the full details.

My advice to other users is to be careful about customizing the solution. If you customize the solution you will need good documentation and information that will have to be retained otherwise, there will be a knowledge gap. Especially if you use it for Single Sign-On or federated authentication and authorization. The more you customize it the more it will cause some issues when you are trying to upgrade. We have found in this particular instance if you do the customization you should have certain consistent standards. If you have this solution across multiple teams, there is no single party that has an overview of the code, and what ends up happening is there is too much customization making the upgrades difficult. However, this all depends on the business.

If we are using the solution in a certain way, especially the authorization with customization can cause problems. Every application might have a different way to authorize its functions in the area. However, the authentication is very straightforward. You have to be careful about customizing the solution, and how to sustain it across your teams. Every three to five years you will need to do an upgrade. Otherwise, you will not be supported. Most of us just treat it as a project, then we move on, and we do not use it until a few years later and then we run into large issues.

I rate ForgeRock a six out of ten. 

We use this solution to manage the identity and access of users to SI and other applications of our company. We implement the identity of the users in that SI.

It secured our system so that it is accessed only by authorized people, and it implemented the SSO.

Their access management solution, OpenAM, is most valuable because it meets the needs of a lot of users.

It should be a little bit easier to implement. It is user-friendly, but there is always scope for improvement.

It is a reliable solution.

It is scalable. We have scaled it.

In terms of the number of users, the whole company has to use ForgeRock to be able to connect to the company. For its administration, we have a team of five people. We don't have any plans to increase its usage.

Their technical support is good.

I have used SiteMinder and EmpowerID and a solution from Okta.

Its implementation is a little bit complex. It took us between four to six months. 

In terms of the implementation strategy, we identified the functional aspects and tried to see if it would meet the needs. After that, we implemented it in the Dev environment, and after that, we implemented it in the Production environment.

I implemented it myself. It does require maintenance, and I handle its maintenance.

Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. 

There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more.

I would recommend this solution if it meets the needs of a company. It is a good solution. You have to implement it to see if it responds to your needs. 

I would rate ForgeRock a seven out of ten.

I have been using ForgeRock as a central repository for identities. We have OpenIDM as one of the products. We also have access management and single sign-on authentication for single sign-on purposes. 

There are different use cases. One of the interesting projects was to use ForgeRock as software as a service for the biggest telecommunication company in Switzerland. They used it as a service for their customers.

I like the intelligent authentication feature.

It should have a better user interface. Its flexibility should also be improved. It is not about simplifying; it is more about flexibility. Each company has its own requirements, and ForgeRock can provide more flexibility in terms of the use of existing modules to implement features for the customers. 

I have been using this solution for three to four years.

It is stable.

It is scalable.

It depends on whether you have a good partner network. If you have limited support for professional technical services, there could be some pain points.

The deployment depends on the use cases and the size of the company. It can be complex for bigger environments, but for smaller companies, it is straightforward. For example, for one of the biggest chemical companies in Germany, we were searching millions of identities. We didn't apply it at the end because of some budget reasons, and the project was canceled or frozen. 

Its price is comparable to other products in the market.

I would recommend this solution. I would advise others to look for a good integrator.

I would rate ForgeRock a nine out of ten.