ForgeRock - PingAM

ForgeRock PingAM is an access management tool for authentication and authorization. It's one of the products in the ForgeRock stack. ForgeRock PingAM provides different types of user authentication, such as the Authentication module. Authentication tree, Authentication chains, Federation(SAML2), OpenID Connect(OIDC)/OAuth2, Multifactor Authentication etc..

In this course, we provide end-to-end PingAM installation with multiple containers, the configuration of the authentication module, chains, and tree, Federation(SAML2) configuration, OIDC configuration, OAuth2 Configuration, sample application integration with PingAM, Rest-endpoints configuration in Postman, etc.

ForgeRock mainly provides the following products.

1.  PingAM

2. PingDS

3. PingIDM

4. PingIG

ForgeRock products are open source projects until version 13.0, and the naming convention of each product starts with Open. Download the source code with a free subscription and make the changes according to the requirement.

After the 13.0 version, the products are commercial and require a paid subscription to download the source code to customize the source code. And also, the product naming convention changed, like removing the Open keyword. But we can download the software/binary file to practice in the lower environment or personally.

The new product's name is as follows.

1. PingAM (formerly AM - Access Management)

2. PingDS (formerly DS - Directory Services)

3. PingIDM (formerly IDM - Identity Management)

4. PingIG (formerly IG - Identity Gateway)

PingAM - (AM - Access Management)

PingAM originated as OpenSSO, it's created by Sun Microsystems and now owned by Oracle Corporation.

PingAM provides authentication and authorization in multiple ways. Here, summarize and share the PingAM's most important and frequently used features.

• Realm

• Self  Service

  • Registration

  • Forgot Username

  • Forgot Password

• Authentication Modules

• Authentication Chains

• Authentication Nodes(Trees)

• Log in with Social - Google, Facebook, LinkedIn, etc...

• OAuth2

• OIDC

• SAML2.0

  • PingAM - IDP

  • PingAM - SP

• Customization

  • XUI (User interface)

  • Java custom node

  • Scripted Decision Node - Create Script by using JavaScript & Groovy

  • SAML SP Adapter Script

  • SAML IDP Adapter Script

  • OAuth2 Access Token Claims Script

• Agents (Java/Web)

• Dynamic Client Registration

• Audit Logging

• Debug Logging

• Replication (Multiple Instances)

• Policy Configuration

• PingAM Rest API