vendor hub
Ping Identity
Everything on ronutz.com for Ping Identity, in one place: every tool, grouped by family, followed by every article. Tools compute locally in your browser; articles are grounded in vendor documentation.
Working with Ping Identity →
The career chapter: what the work with Ping Identity actually was, which accounts, which escalations, and what it certified.
The Ping Identity story in the industry section →
How Ping Identity got here: the acquisitions, the pivots, and the people whose work ended up inside the platform.
Ping Identity lineage →
What Ping Identity is made of, and who made it. Every acquisition below is verified against primary sources, with the product line it turned into where that connection is documented rather than inferred.
Certification prep
PingFederate administration, end to end →
The blueprint's assumed fundamentals first - the directory model and the Kerberos ticket machinery - then the ten product articles in teaching order, SCIM beside the provisioning stop, and the SSO flows to close. The reading spine behind the PFP-001 certification guide.
16 articles
The Ping Identity Platform →
The whole Ping estate in reading order: the PingOne platform map and the ForgeRock lineage first, so every product name resolves; then PingAccess policy, the PingDirectory data platform, and DaVinci orchestration; closing with the PingFederate shelf - the self-managed federation core - in its established teaching order. The companion walk to the Certified Professional guides on the certifications hub.
15 articles
Tools (11)
Single sign-on & federation
Dekoder OIDC
Wklej token tożsamości OpenID Connect lub dokument .well-known/openid-configuration i zdekoduj go: główne claims, claims profilu, endpointy i możliwości, z kontrolą wymaganych claims, algorytmu podpisu, nonce i PKCE.
Tożsamość i tokenySAML Decoder
Paste a SAML Response or assertion (raw, base64, or URL-encoded) and decode its issuer, status, subject, conditions, audience, and attributes, with signature and weak-algorithm checks. Hardened against XXE.
Tożsamość i tokeny
OAuth & tokens
Dekoder i weryfikator JWT
Zdekoduj nagłówek i claims tokena JSON Web Token, odczytaj jego wygaśnięcie i czasy zwykłym językiem oraz zweryfikuj podpis HS256/384/512 za pomocą wklejonego sekretu. Działa w całości w twojej przeglądarce.
Tożsamość i tokenyJWKS explainer + key matcher
Paste a JSON Web Key Set to break down every key, flag any private material, and match a JWT to its key by kid. Nothing leaves your browser.
Tożsamość i tokenyWeryfikator i challenge OAuth PKCE
Wygeneruj code_verifier OAuth 2.0 i wyprowadź jego code_challenge S256, albo wklej własny i sprawdź go względem reguł długości i zestawu znaków z RFC 7636. To samo wyprowadzenie SHA-256 w base64url, którego oczekuje twój serwer autoryzacji. Działa w całości w twojej przeglądarce.
Tożsamość i tokeny
Risk & client signals
HTTP header-order fingerprint
Paste a request header block and see how header order and casing fingerprint the client - the passive-HTTP analog of JA3.
Security & WAFJA3 / JA3N passive TLS fingerprint
Paste a JA3 string and it recomputes the JA3 hash, computes the permutation-stable JA3N, decodes the fields, and flags GREASE values.
Security & WAFJA4 / JA3 TLS fingerprint decoder
Decode a JA4 TLS client fingerprint or a JA3 fingerprint into its fields, compute the hashed JA4 from raw values, or compute a JA3 MD5. It auto-detects which you paste. All in your browser.
Security & WAFUser-Agent entropy analyzer
Paste a User-Agent string and see the identifying tokens it exposes, the distinguishing bits each contributes, and the Client Hints migration.
Security & WAF
Articles (2)
More
ICMP, ping, and traceroute: the Control Messages That Explain Your Network
The Internet Control Message Protocol is how the network talks about itself: echo request and reply give us ping, time-to-live exceeded gives us traceroute, and destination unreachable names exactly what failed. The purpose of TTL, the common uses of ICMP, and how to read the unreachable family instead of just noticing it.
SieciReadPingFederate OGNL Expressions: Mappings, Criteria, and Why Authoring Is Its Own Role
PingFederate lets you write OGNL in attribute mappings and issuance criteria. A mapping returns a value; a criterion must return true or false, and confusing the two fails quietly in a way that looks like an authorisation problem elsewhere. Expression authoring is gated behind a separate administrative role for one reason: an expression runs code on the server, which is a different permission from configuring a connection.
Tożsamość i tokenyRead