vendor hub
Ping Identity
Everything on ronutz.com for Ping Identity, in one place: every tool, grouped by family, followed by every article. Tools compute locally in your browser; articles are grounded in vendor documentation.
Working with Ping Identity →
The career chapter: what the work with Ping Identity actually was, which accounts, which escalations, and what it certified.
The Ping Identity story in the industry section →
How Ping Identity got here: the acquisitions, the pivots, and the people whose work ended up inside the platform.
Ping Identity lineage →
What Ping Identity is made of, and who made it. Every acquisition below is verified against primary sources, with the product line it turned into where that connection is documented rather than inferred.
Certification prep
PingFederate administration, end to end →
The blueprint's assumed fundamentals first - the directory model and the Kerberos ticket machinery - then the ten product articles in teaching order, SCIM beside the provisioning stop, and the SSO flows to close. The reading spine behind the PFP-001 certification guide.
16 articles
The Ping Identity Platform →
The whole Ping estate in reading order: the PingOne platform map and the ForgeRock lineage first, so every product name resolves; then PingAccess policy, the PingDirectory data platform, and DaVinci orchestration; closing with the PingFederate shelf - the self-managed federation core - in its established teaching order. The companion walk to the Certified Professional guides on the certifications hub.
15 articles
Tools (11)
Single sign-on & federation
OIDC 解码器
粘贴 OpenID Connect ID token 或 .well-known/openid-configuration 文档并解码：核心声明、个人资料声明、端点和能力，并检查必需声明、签名算法、nonce 和 PKCE。
身份与令牌SAML Decoder
Paste a SAML Response or assertion (raw, base64, or URL-encoded) and decode its issuer, status, subject, conditions, audience, and attributes, with signature and weak-algorithm checks. Hardened against XXE.
身份与令牌
OAuth & tokens
JWKS explainer + key matcher
Paste a JSON Web Key Set to break down every key, flag any private material, and match a JWT to its key by kid. Nothing leaves your browser.
身份与令牌JWT 解码器与验证器
解码 JSON Web Token 的头部和声明，以通俗语言读取其过期时间和时序，并用粘贴的密钥验证 HS256/384/512 签名。完全在你的浏览器中运行。
身份与令牌OAuth PKCE 验证器与 challenge
生成 OAuth 2.0 code_verifier 并派生其 S256 code_challenge，或粘贴你自己的并按 RFC 7636 的长度和字符集规则进行检查。与你的授权服务器所期望的 SHA-256 base64url 派生相同。完全在你的浏览器中运行。
身份与令牌
Risk & client signals
HTTP header-order fingerprint
Paste a request header block and see how header order and casing fingerprint the client - the passive-HTTP analog of JA3.
Security & WAFJA3 / JA3N passive TLS fingerprint
Paste a JA3 string and it recomputes the JA3 hash, computes the permutation-stable JA3N, decodes the fields, and flags GREASE values.
Security & WAFJA4 / JA3 TLS fingerprint decoder
Decode a JA4 TLS client fingerprint or a JA3 fingerprint into its fields, compute the hashed JA4 from raw values, or compute a JA3 MD5. It auto-detects which you paste. All in your browser.
Security & WAFUser-Agent entropy analyzer
Paste a User-Agent string and see the identifying tokens it exposes, the distinguishing bits each contributes, and the Client Hints migration.
Security & WAF
Articles (2)
More
ICMP, ping, and traceroute: the Control Messages That Explain Your Network
The Internet Control Message Protocol is how the network talks about itself: echo request and reply give us ping, time-to-live exceeded gives us traceroute, and destination unreachable names exactly what failed. The purpose of TTL, the common uses of ICMP, and how to read the unreachable family instead of just noticing it.
网络ReadPingFederate OGNL Expressions: Mappings, Criteria, and Why Authoring Is Its Own Role
PingFederate lets you write OGNL in attribute mappings and issuance criteria. A mapping returns a value; a criterion must return true or false, and confusing the two fails quietly in a way that looks like an authorisation problem elsewhere. Expression authoring is gated behind a separate administrative role for one reason: an expression runs code on the server, which is a different permission from configuring a connection.
身份与令牌Read