vendor hub
Ping Identity
Everything on ronutz.com for Ping Identity, in one place: every tool, grouped by family, followed by every article. Tools compute locally in your browser; articles are grounded in vendor documentation.
Working with Ping Identity →
The career chapter: what the work with Ping Identity actually was, which accounts, which escalations, and what it certified.
The Ping Identity story in the industry section →
How Ping Identity got here: the acquisitions, the pivots, and the people whose work ended up inside the platform.
Ping Identity lineage →
What Ping Identity is made of, and who made it. Every acquisition below is verified against primary sources, with the product line it turned into where that connection is documented rather than inferred.
Certification prep
PingFederate administration, end to end →
The blueprint's assumed fundamentals first - the directory model and the Kerberos ticket machinery - then the ten product articles in teaching order, SCIM beside the provisioning stop, and the SSO flows to close. The reading spine behind the PFP-001 certification guide.
16 articles
The Ping Identity Platform →
The whole Ping estate in reading order: the PingOne platform map and the ForgeRock lineage first, so every product name resolves; then PingAccess policy, the PingDirectory data platform, and DaVinci orchestration; closing with the PingFederate shelf - the self-managed federation core - in its established teaching order. The companion walk to the Certified Professional guides on the certifications hub.
15 articles
Tools (11)
Single sign-on & federation
OIDC-Decoder
Füge ein OpenID-Connect-ID-Token oder ein .well-known/openid-configuration-Dokument ein und decodiere es: die Kern-Claims, Profil-Claims, Endpoints und Fähigkeiten, mit Prüfungen für erforderliche Claims, Signaturalgorithmus, Nonce und PKCE.
Identität & TokensSAML Decoder
Paste a SAML Response or assertion (raw, base64, or URL-encoded) and decode its issuer, status, subject, conditions, audience, and attributes, with signature and weak-algorithm checks. Hardened against XXE.
Identität & Tokens
OAuth & tokens
JWKS explainer + key matcher
Paste a JSON Web Key Set to break down every key, flag any private material, and match a JWT to its key by kid. Nothing leaves your browser.
Identität & TokensJWT-Decoder und -Verifizierer
Dekodieren Sie Header und Claims eines JSON Web Token, lesen Sie Ablauf und Zeitangaben in Klartext und verifizieren Sie eine HS256/384/512-Signatur mit einem eingefügten Geheimnis. Läuft vollständig in Ihrem Browser.
Identität & TokensOAuth-PKCE-Verifizierer und -Challenge
Erzeugen Sie einen OAuth-2.0-code_verifier und leiten Sie dessen S256-code_challenge ab, oder fügen Sie Ihren eigenen ein und prüfen Sie ihn gegen die Längen- und Zeichensatzregeln von RFC 7636. Dieselbe SHA-256-base64url-Ableitung, die Ihr Autorisierungsserver erwartet. Läuft vollständig in Ihrem Browser.
Identität & Tokens
Risk & client signals
HTTP header-order fingerprint
Paste a request header block and see how header order and casing fingerprint the client - the passive-HTTP analog of JA3.
Security & WAFJA3 / JA3N passive TLS fingerprint
Paste a JA3 string and it recomputes the JA3 hash, computes the permutation-stable JA3N, decodes the fields, and flags GREASE values.
Security & WAFJA4 / JA3 TLS fingerprint decoder
Decode a JA4 TLS client fingerprint or a JA3 fingerprint into its fields, compute the hashed JA4 from raw values, or compute a JA3 MD5. It auto-detects which you paste. All in your browser.
Security & WAFUser-Agent entropy analyzer
Paste a User-Agent string and see the identifying tokens it exposes, the distinguishing bits each contributes, and the Client Hints migration.
Security & WAF
Articles (2)
More
ICMP, ping, and traceroute: the Control Messages That Explain Your Network
The Internet Control Message Protocol is how the network talks about itself: echo request and reply give us ping, time-to-live exceeded gives us traceroute, and destination unreachable names exactly what failed. The purpose of TTL, the common uses of ICMP, and how to read the unreachable family instead of just noticing it.
NetzwerkReadPingFederate OGNL Expressions: Mappings, Criteria, and Why Authoring Is Its Own Role
PingFederate lets you write OGNL in attribute mappings and issuance criteria. A mapping returns a value; a criterion must return true or false, and confusing the two fails quietly in a way that looks like an authorisation problem elsewhere. Expression authoring is gated behind a separate administrative role for one reason: an expression runs code on the server, which is a different permission from configuring a connection.
Identität & TokensRead