Identity Governance and Administration (IGA) Software
Ping Identity Governance: features, pricing and who it fits
Ping Identity Governance is an add-on to PingOne Advanced Identity Cloud, the former ForgeRock Identity Cloud, covering access requests, certification campaigns and SoD policies. It is added by contacting Ping, and the recommendations feature must be enabled by Ping Support.
Who Ping Identity Governance is for
Best for
- Existing PingOne Advanced Identity Cloud customers
- Regulated organizations needing certification campaigns on the Ping platform
Look elsewhere if
- Teams not on PingOne Advanced Identity Cloud
- Buyers who need a mature governance product with deep peer evidence
Ping Identity Governance features
- Provisioning automation
- Lifecycle management of users and entitlements
- Access reviews and certification
- Scheduled certification campaigns where managers approve or revoke their team's access; ML governance recommendations compare peer access
- Segregation of duties controls
- SoD policies block conflicting permission combinations
- Integrations and connectors
- Governs SaaS, cloud and on-premises apps; examples include Salesforce, Snowflake, Google Workspace
- Compliance and audit reporting
- Audit record of who requested, approved and used access; certification campaigns
- Pricing model
- Quote only; add-on to PingOne Advanced Identity Cloud
- Target company size
- Enterprise, regulated industries
Integrations, security and hosting
- Security and compliance
- SOC 2 Type 2, ISO 27001:2022, 27017, 27018, CSA STAR Level 2, HIPAA security standards
- Data residency
- Region chosen at sign-up: US, Canada, Brazil, Europe, Middle East, Asia, Australia
Worth knowing before you buy
- It is an add-on and must be added by contacting Ping
- The governance recommendations feature must be enabled by Ping Support
- Ping docs advise against configuring governance in both the Alpha and Bravo realms of one tenant and suggest a separate instance for workforce governance
- Ping Identity merged with ForgeRock in 2023, so the platform underneath is the former ForgeRock Identity Cloud
- Gartner Peer Insights shows about 4.1 from 54 ratings for Ping in IGA, with lowest subscores on scalability and customization
Ping Identity Governance alternatives
Vendor dossier
Fit by company size
| Category | 1-10 people | 11-50 people | 51-500 people | 500+ people |
|---|---|---|---|---|
| Identity Governance and Administration (IGA) Software | No data | Poor fit | No data | Strong fit |
Strong fitWorkablePoor fitNo data from the vendor
How buying Ping Identity Governance works
- How you buy
- Through sales
- Demo or quote needed for
- Governance add-on
Security and data protection
- SOC 2
- Type II
- ISO 27001
- Yes
- Data hosting regions
- US, Canada (Montreal), Brazil (Sao Paulo), Europe, Middle East (Doha, Dammam), Asia (Singapore, Jakarta, Hong Kong), Australia (Sydney)
- HIPAA
- Complies with HIPAA security standards
From Ping Identity Governance's trust center, security and legal pages. Anything not listed is not published.
About the company
- Founded
- 2002
- Headquarters
- Denver, Colorado, US
- Ownership
- private equity (Thoma Bravo)
- Employees
- 2,311 (2026)
- 2022
- Thoma Bravo acquired Ping Identity for about $2.8 billion
- 2023
- Combined with ForgeRock
What vendors in this category ask before quoting
Answer these once in a SaaSBid request and Ping Identity Governance and its alternatives quote against the same facts.
- How many identities, including contractors and service accounts, need to be governed?Most vendors price per identity, and the count sets the tier.
- Which directory and identity provider do you use today?Okta, Entra and Ping add-ons only work on their own platforms.
- Which business applications and on-premises systems must be connected?Connector coverage drives implementation effort and may require extra licenses.
- Which audits or regulations drive this project?SOX or similar rules make separation-of-duties controls a requirement.
- Do you want SaaS, a private cloud or software run in your own data center?Deployment model changes price, timeline and staffing.
- What is your target go-live, and do you have identity engineers in-house?It decides whether a partner or accelerator program is needed.