ForgeRock
Digital identity and access management platform
ForgeRock is a digital identity and access management platform providing authentication, authorization, and identity governance capabilities for both workforce and customer-facing applications, now operating as part of Ping Identity…
Definition
ForgeRock is a digital identity and access management platform providing authentication, authorization, and identity governance capabilities for both workforce and customer-facing applications, now operating as part of Ping Identity following an acquisition. Its distinguishing focus, relative to platforms built primarily for employee login, was serving very large consumer-facing identity populations, such as a bank's or telecom's entire customer base, where scale and self-service registration flows matter more than they typically do for workforce-only identity needs.
Overview
ForgeRock's platform historically covered a broad set of identity and access management functions: single sign-on and multi-factor authentication for verifying who a user is, API and application authorization controls governing what an authenticated user can do, a directory service for storing identity data at scale, and identity governance features for managing access lifecycles. A distinguishing aspect of ForgeRock relative to some competitors was its strong focus on customer identity and access management, serving large-scale consumer-facing use cases such as telecom and banking customer logins, in addition to traditional workforce identity needs. Supporting millions of consumer identities rather than thousands of employee accounts changes the engineering requirements considerably, since a directory and authentication layer built for workforce scale can struggle under consumer-scale registration spikes, such as a promotional signup event, without architecture specifically designed to absorb that kind of load. Because customer identity and access management often involves far larger user populations than workforce identity — millions of consumers rather than thousands of employees — ForgeRock's architecture was built with an emphasis on horizontal scalability and flexible deployment options, including self-hosted, cloud, and identity-as-a-service models, letting large enterprises choose based on data residency and operational requirements rather than being locked into a single delivery model. Deployment flexibility across self-hosted, cloud, and identity-as-a-service models mattered particularly to large regulated customers, such as banks in certain jurisdictions, that faced data residency or operational requirements ruling out a cloud-only identity provider entirely. ForgeRock competed with Okta, Microsoft Entra ID, and Ping Identity itself before being acquired by Ping Identity's parent company, Thoma Bravo, and merged into the Ping Identity portfolio, consolidating two previously separate identity vendors under common ownership. This acquisition reshaped the competitive landscape, with the combined company now positioned to compete more directly against Okta and Microsoft across both workforce and customer identity segments. Following its acquisition, ForgeRock's technology has been folded into Ping Identity's roadmap rather than operated as a fully independent product line, so a prospective customer today is generally evaluating the combined company's current offering rather than a standalone ForgeRock product in isolation. Organizations that adopted ForgeRock, or now evaluate the merged Ping Identity and ForgeRock portfolio, typically have large-scale customer identity needs alongside standard workforce identity requirements, and value deployment flexibility across self-hosted and cloud models. Smaller organizations with straightforward workforce-only identity needs often find lighter, cloud-native-only platforms like Okta sufficient without the additional complexity ForgeRock's broader scope introduces. A telecom or bank already running ForgeRock for customer login typically continues operating it largely unchanged in the near term, since migrating a live consumer identity system serving millions of active accounts carries substantial risk and is not undertaken quickly even after a corporate acquisition. Organizations without large-scale consumer identity needs, and without strict self-hosting requirements, generally find a simpler, cloud-native workforce identity platform sufficient, since ForgeRock's particular strengths address a scale and deployment-flexibility problem many smaller organizations do not actually have.
Key Features
- Single sign-on and multi-factor authentication for workforce and consumers
- Customer identity and access management built for large-scale consumer login
- API and application authorization policy enforcement
- Scalable directory services for large identity populations
- Identity governance features for managing access lifecycles
- Flexible deployment across self-hosted, cloud, and identity-as-a-service
- Now integrated into the Ping Identity product portfolio
- Strong presence in regulated, high-scale sectors like telecom and banking