PingOne from Ping Identity vs. SailPoint Identity Security Cloud

Really like [this] solution, it fits our requirements 100%. There are unlimited possibilities to extend the product, either by creating additional adapters or selectors. We really like the policy management level in PingFederate. It's extremely helpful when we can specify customer journey per many different requirements like user location, application type etc. As well, both StepUp and TopDown authentication flows were implemented [easily].

SailPoint would be be better suited for a large organization. It can handle hybrid environments well and integrates with other enterprise tools. SailPoint would be less appropriate for a smaller organization that does not have a dedicated IAM team or technical knowledge needed. Based on the auditing and workflow this solution would also work well for a highly regulated environment.

Incentivized

• Based on open standards, we can use as much or as little of the Ping suite as we like, depending on which other technologies we've already implemented.
• Continuous innovation and product enhancements have ensured their products continue to meet our rapidly evolving needs.
• Ping Identity has been an outstanding partner, starting with the RFP process and continuing to this day, years after the sale. They are focused on our success at every level of the company and are highly responsive to our needs, issues, and product suggestions.

• Brings users access, profiles and accounts all into one place
• Manages the Life Cycle Management process across ALL identities, permanent and Temporary
• Secures and manages access to critical applications and resources across the group
• Enables Info. Security to customise, share and delegate authority across the group
• Single version of the truth across our technology platform

Incentivized

• PingID has some limitations when used as the MFA for some LDAP implementations. You need to use it as a RADIUS password credential validator to solve for some of those limitations, which in turn causes challenges with our ephemeral cloud deployment model of PingFederate.
• The basic logon services within PingFederate are adequate and well-documented, but simple features like disabling user input after entering credentials would help with some of the additional customization required to support real world failure modes.
• PingCentral authorization models and configuration remain unpolished compared to other products, and now the features seem to be shifting toward onboarding PingAccess and PingDirectory over improving baseline administrative functionality/operations.

Incentivized

• The user interface is not very intuitive. It is hard for the occasional user to navigate through the request process. There are no instructions on the screen to help the user to know what to do. It is left up to the user to figure out what to click on and how to navigate through the process.

Incentivized

Its a best tool for a CISO, works very well, easy to use, great connectors and integrations, great reports, automated reviews, full compliance, great support to a JML (Joiners, Movers and Leavers) project;

Ping's solutions are a powerful tool, but with that comes the need for skills to operate them. It's not easy for inexperienced engineers to run. From the end-user perspective, it is fully customizable and can be as seamless as you need.

Incentivized

The product is competent and very good at solving the main business pain-points affecting any organisation that currently does not have IGA as a practice. The downside is that it is a very complex product, requiring dedicated and highly skilled professionals that can take care of any develop it.

Incentivized

Really good customer support, we always receive what we need. Sometimes instead of [a] solution (which have to be developed) we are receiving [a] work around, which is helping ad hoc. Then after time [needed for support to] develop fix we are receiving full fix or we [are] just waiting for new version of the product where our "bugs" are fixed.

Support for Customizations is very limited.

Incentivized

The first journey isn't easy because you need to win your internal process and problem concern and Sailpoint have many experience to support this phase, and make the real difference into the client experience;

PingOne from Ping Identity is the clear winner here. I can say this because the cost of their service is very worth it, and their service offers more than their competitors. In addition to that, this software is still improving daily, which only means that there is still more to come, and their Developers are giving their fair share of service to keep their software the best.

Incentivized

The on-prem SailPoint IdentityIQ platform provides the necessary customization that is required in our dynamic environment. Although we may look at a cloud-based Identity Management service again in the future, (there are many advantages), our identity management, authentication, and application assignment processes cannot be quickly consolidated to a single cloud-based service at this time.

• The TCO for our deployment of Ping will be over a million dollars/year less to operate compared to the systems it replaces.
• Moving the organization to federated protocols allows greater flexibility in our cloud migration strategy and zero trust designs.
• Operating with federated protocols internally facilitates M&A and divestiture activities.

Incentivized

• Over 300,000 password change/reset calls avoided to the helpdesk annually.
• 1,000 plus accounts with proper accesses provisioned via automated birthright processes weekly versus 1-2 days of manual provisioning and approvals. With a call center population that churns many people per week, this brings many dollars of efficiency to the operations teams.
• Flexibility on terminations to manage accounts and access for target applications based on regulatory or business rules to ensure compliance and avoid fines for non-compliance.

Incentivized