vendor hub
Ping Identity
Everything on ronutz.com for Ping Identity, in one place: every tool, grouped by family, followed by every article. Tools compute locally in your browser; articles are grounded in vendor documentation.
Working with Ping Identity →
The career chapter: what the work with Ping Identity actually was, which accounts, which escalations, and what it certified.
The Ping Identity story in the industry section →
How Ping Identity got here: the acquisitions, the pivots, and the people whose work ended up inside the platform.
Ping Identity lineage →
What Ping Identity is made of, and who made it. Every acquisition below is verified against primary sources, with the product line it turned into where that connection is documented rather than inferred.
Certification prep
PingFederate administration, end to end →
The blueprint's assumed fundamentals first - the directory model and the Kerberos ticket machinery - then the ten product articles in teaching order, SCIM beside the provisioning stop, and the SSO flows to close. The reading spine behind the PFP-001 certification guide.
16 articles
The Ping Identity Platform →
The whole Ping estate in reading order: the PingOne platform map and the ForgeRock lineage first, so every product name resolves; then PingAccess policy, the PingDirectory data platform, and DaVinci orchestration; closing with the PingFederate shelf - the self-managed federation core - in its established teaching order. The companion walk to the Certified Professional guides on the certifications hub.
15 articles
Tools (11)
Single sign-on & federation
Декодер OIDC
Вставьте ID-токен OpenID Connect или документ .well-known/openid-configuration и декодируйте его: основные claims, claims профиля, endpoints и возможности, с проверками обязательных claims, алгоритма подписи, nonce и PKCE.
Идентификация и токеныSAML Decoder
Paste a SAML Response or assertion (raw, base64, or URL-encoded) and decode its issuer, status, subject, conditions, audience, and attributes, with signature and weak-algorithm checks. Hardened against XXE.
Идентификация и токены
OAuth & tokens
Верификатор и challenge OAuth PKCE
Сгенерируйте code_verifier OAuth 2.0 и выведите его code_challenge S256, либо вставьте свой и проверьте его по правилам длины и набора символов RFC 7636. То же самое выведение SHA-256 в base64url, которое ожидает ваш сервер авторизации. Работает полностью в вашем браузере.
Идентификация и токеныДекодировщик и верификатор JWT
Декодируйте заголовок и утверждения (claims) JSON Web Token, прочитайте срок его действия и тайминги простым языком и проверьте подпись HS256/384/512 с помощью вставленного секрета. Работает полностью в вашем браузере.
Идентификация и токеныJWKS explainer + key matcher
Paste a JSON Web Key Set to break down every key, flag any private material, and match a JWT to its key by kid. Nothing leaves your browser.
Идентификация и токены
Risk & client signals
HTTP header-order fingerprint
Paste a request header block and see how header order and casing fingerprint the client - the passive-HTTP analog of JA3.
Security & WAFJA3 / JA3N passive TLS fingerprint
Paste a JA3 string and it recomputes the JA3 hash, computes the permutation-stable JA3N, decodes the fields, and flags GREASE values.
Security & WAFJA4 / JA3 TLS fingerprint decoder
Decode a JA4 TLS client fingerprint or a JA3 fingerprint into its fields, compute the hashed JA4 from raw values, or compute a JA3 MD5. It auto-detects which you paste. All in your browser.
Security & WAFUser-Agent entropy analyzer
Paste a User-Agent string and see the identifying tokens it exposes, the distinguishing bits each contributes, and the Client Hints migration.
Security & WAF
Articles (2)
More
ICMP, ping, and traceroute: the Control Messages That Explain Your Network
The Internet Control Message Protocol is how the network talks about itself: echo request and reply give us ping, time-to-live exceeded gives us traceroute, and destination unreachable names exactly what failed. The purpose of TTL, the common uses of ICMP, and how to read the unreachable family instead of just noticing it.
СетиReadPingFederate OGNL Expressions: Mappings, Criteria, and Why Authoring Is Its Own Role
PingFederate lets you write OGNL in attribute mappings and issuance criteria. A mapping returns a value; a criterion must return true or false, and confusing the two fails quietly in a way that looks like an authorisation problem elsewhere. Expression authoring is gated behind a separate administrative role for one reason: an expression runs code on the server, which is a different permission from configuring a connection.
Идентификация и токеныRead