2025 – present
Ping Identity and ForgeRock
The identity chapter: two bloodlines, one platform - federation from Denver, Sun's rescued open source from Oslo.
Ping Identity opens the identity era of this record - and it carries two heritages. The Denver federation pioneer behind PingFederate, and ForgeRock, the Norwegian fork that saved Sun Microsystems' open-source identity stack, were combined by Thoma Bravo in August 2023 into the platform this page profiles. In 2025 that alignment became formal training.
How two identity bloodlines became one
PingFederate, studied properly
In 2025 Rodolfo completed Ping Identity's official PingFederate training and earned the PingFederate Practitioner credential, deep-diving the federation server that turned SAML from a specification into enterprise plumbing. For someone who teaches access management on other platforms and builds SAML and OIDC tooling for this site, it was the natural next protocol stack to master from the inside.
Identity, decoded on this site
The identity toolset on this site decodes the same artifacts PingFederate and PingOne move in production: the SAML decoder, the JWT and OIDC inspectors, and the PKCE and TOTP tools all read the assertions, tokens, and flows federation runs on - locally, in the browser. The chapter's coursework runs through PingFederate practitioner training in 2025, and the federation patterns it teaches are exactly what those tools make visible.
Certifications
Authorized Ping Identity instructor (cleared 2026). PingFederate Practitioner (2025), earned through Ping Identity Training. Full detail on the credentials page.
Founding stories
Ping Identity
Andre Durand had already given the internet an open messaging protocol - he founded Jabber, whose XMPP lineage Cisco acquired in 2008 - when he turned to a harder federation problem: identity. Ping Identity, founded in Denver in 2002 with Bryan Field-Elliot, bet that businesses would need to trust each other's logins across organizational lines, and became a standard-bearer for SAML and the federation protocols that followed. Two decades later the company Durand still leads anchors identity for more than half of the Fortune 100.
ForgeRock
When Oracle closed its acquisition of Sun Microsystems in January 2010 and suspended Sun's open-source identity work, five of the engineers who had built it refused to let it die. In February 2010 they founded ForgeRock in Norway - on famously little seed money - and forked the stack they knew line by line: OpenSSO became OpenAM, the directory lineage became OpenDJ, and OpenIDM and OpenIG grew alongside, maturing into the ForgeRock Identity Platform. It is one of open source's great lifeboat stories: a corporate roadmap decision undone by the people who had written the code, who then took the rescued product all the way to the New York Stock Exchange.
The timeline
- Founded on federation
Ping starts in Denver with a thesis years ahead of its market: single sign-on should cross company boundaries, carried by open standards rather than shared passwords.
- PingFederate
The flagship federation server ships and grows up alongside the standards it implements - SAML, then OAuth and OpenID Connect - becoming the enterprise workhorse for connecting workforces and partners to applications.
- Sun Microsystems open-sources OpenSSO
The other bloodline begins: Sun releases its Java System Access Manager heritage as the OpenSSO open-source project - iPlanet and Sun ONE DNA, now developed in the open. The Sun directory lineage travels with it.
ForgeRock's own AM deployment-planning history.
- ForgeRock: the fork that saved Sun's identity stack
Oracle completes the Sun acquisition in January 2010 and suspends OpenSSO. In February, five former Sun engineers found ForgeRock in Norway to carry the code forward: OpenSSO is reborn as OpenAM, the directory as OpenDJ, with OpenIDM and OpenIG joining - the seeds of the ForgeRock Identity Platform.
Company records give February 2010; the Norwegian entity ForgeRock AS was incorporated in October 2009.
- Vista takes the company private
June 2016: Vista Equity Partners acquires majority ownership for roughly $600 million, funding the expansion from federation into a full identity platform - MFA, access management, directory, and the PingOne cloud.
- IPO on the NYSE
September 2019: Ping lists on the New York Stock Exchange as PING - three years as a public company that end the way much of the identity market's decade did, in private equity hands.
- ForgeRock IPO: FORG
September 16, 2021: eleven years and about $233.7 million in funding after the fork, ForgeRock lists on the New York Stock Exchange, popping roughly 44 percent on day one at a valuation around $2 billion - the rescued open-source stack, ringing the bell.
- Thoma Bravo, $2.8 billion
October 18, 2022: Thoma Bravo completes its all-cash take-private of Ping at $28.50 per share - one piece of the firm's identity buying spree alongside SailPoint and, days earlier in agreement, ForgeRock.
Thoma Bravo press release.
- ForgeRock folds in
August 23, 2023: Thoma Bravo closes the ~$2.3 billion ForgeRock acquisition and combines it into Ping the same day, uniting two Access Management Magic Quadrant Leaders under Durand - a merger of direct rivals executed in about a hundred days.
Thoma Bravo press release; both firms Leaders in Gartner's 2023 Access Management MQ.
- One platform, both heritages
The combined company rationalizes overlapping portfolios without forced migrations: PingOne and the ForgeRock lineage continue side by side, with orchestration (DaVinci) as the connective tissue across workforce and customer identity.
- Rodolfo's chapterRodolfo's chapter
PingFederate Practitioner in 2025 through Ping Identity Training, and the authorized-instructor clearance in 2026 - the fifth vendor in the teaching portfolio, delivered through Red Education.
Flagship products and solutions
- PingFederateThe enterprise federation server - SAML, OAuth, and OpenID Connect brokering for workforce and partner single sign-on; the product this site's identity tooling most often speaks to.
- PingOneThe cloud identity platform: SSO, MFA (PingID), risk, and identity verification delivered as SaaS.
- PingOne DaVinciNo-code identity orchestration - the visual journey builder (from the Singular Key acquisition) that stitches authentication, risk, and fraud signals into flows.
- PingAccess and PingDirectoryWeb/API access enforcement and the high-scale directory underpinning large deployments.
- ForgeRock Identity Platform (Advanced Identity Cloud)The ForgeRock heritage carried forward post-merger: Access Management, Identity Management, Directory Services, and Identity Gateway - the OpenAM, OpenIDM, OpenDJ, and OpenIG lineages, with journey Trees for orchestration.
Key innovations
- Federation as a productTurning SAML from a specification into dependable enterprise software - Ping's founding contribution, and why 'PingFederate' became close to a common noun in identity work.
- Identity orchestrationDaVinci's journey-time orchestration - assembling authentication and fraud checks visually - one of the capabilities analysts singled out across both Ping and ForgeRock.
- Open source as a lifeboatForgeRock's founding move - forking OpenSSO and OpenDS the month Oracle shelved them - remains a canonical proof that open licensing lets a community outlive a corporate roadmap.
- The identity roll-upThe Ping-ForgeRock combination: proof that even head-to-head IAM rivals could be merged into one platform company without forcing customer migrations.
Main markets
Ping competes at the top of workforce and customer identity and access management against Microsoft and Okta, concentrated in large, complex enterprises - banks, carriers, governments - where hybrid deployment, standards depth, and orchestration decide the deal.
Analyst standing
- Ping Identity and ForgeRock were each named Leaders in Gartner's 2023 Access Management Magic Quadrant - the year Thoma Bravo combined them into a single company.