--- title: "ForgeRock Review: Enterprise CIAM and Identity Platform | IDSync" description: "ForgeRock is an enterprise identity platform for CIAM and workforce access, now part of Ping Identity. See strengths, limitations, and when to choose it." lang: en json-ld: | [ { "@context": "https://schema.org", "@type": "SoftwareApplication", "name": "ForgeRock", "applicationCategory": "SecurityApplication", "applicationSubCategory": "Customer Identity / CIAM", "url": "https://www.forgerock.com", "description": "ForgeRock is a long-standing enterprise identity platform spanning customer identity (CIAM), workforce access management, directory services and identity governance. It is known for deep configurability, an intelligent access journey designer and the ability to model complex authentication and authorization flows. Following the 2023 acquisition by Thoma Bravo, ForgeRock was combined with Ping Identity, and the two product lines are being unified over time, so buyers should review the current roadmap and product naming before committing.", "offers": { "@type": "Offer", "category": "enterprise" }, "dateModified": "2026-05-31T13:58:15.541473+00:00" }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What is ForgeRock?", "acceptedAnswer": { "@type": "Answer", "text": "ForgeRock is a long-standing enterprise identity platform spanning customer identity (CIAM), workforce access management, directory services and identity governance. It is known for deep configurability, an intelligent access journey designer and the ability to model complex authentication and authorization flows. Following the 2023 acquisition by Thoma Bravo, ForgeRock was combined with Ping Identity, and the two product lines are being unified over time, so buyers should review the current roadmap and product naming before committing." } }, { "@type": "Question", "name": "Who is ForgeRock best for?", "acceptedAnswer": { "@type": "Answer", "text": "Large enterprises that need a configurable identity platform across customer and workforce use cases and are comfortable with longer implementations." } } ] }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://idsync.com/" }, { "@type": "ListItem", "position": 2, "name": "Directory", "item": "https://idsync.com/directory" }, { "@type": "ListItem", "position": 3, "name": "Customer Identity / CIAM", "item": "https://idsync.com/directory/category/ciam" }, { "@type": "ListItem", "position": 4, "name": "ForgeRock", "item": "https://idsync.com/directory/forgerock" } ] } ] --- [![IDSync — identity software buyer platform](/assets/idsync-logo-BKS89EW4.png)](/) [Directory](/directory) [Compare](/compare) [Resources](/resources) [Browse tools](/directory)[Run Stack Finder](/stack-finder) 1. [Home](/) 2. [Directory](/directory) 3. [Customer Identity / CIAM](/directory/category/ciam) 4. ForgeRock ![ForgeRock company logo](https://www.google.com/s2/favicons?sz=128&domain=forgerock.com) # ForgeRock Enterprise identity platform covering CIAM, workforce access, directory and identity governance, now part of Ping Identity. Last updated 3 months ago [Visit site](https://www.forgerock.com) Quick answer ## What is ForgeRock? Short answer ForgeRock is a long-standing enterprise identity platform spanning customer identity (CIAM), workforce access management, directory services and identity governance. It is known for deep configurability, an intelligent access journey designer and the ability to model complex authentication and authorization flows. Following the 2023 acquisition by Thoma Bravo, ForgeRock was combined with Ping Identity, and the two product lines are being unified over time, so buyers should review the current roadmap and product naming before committing. Best for Large enterprises that need a configurable identity platform across customer and workforce use cases and are comfortable with longer implementations. When to choose You are an enterprise needing fine-grained control over identity journeys, have an existing ForgeRock or Ping footprint, or need both CIAM and workforce in one platform. When not to choose You need a lightweight developer-first auth library, a fast SaaS-only deployment, or want transparent self-serve pricing. Related tools & categories [Workforce IAM](/directory/category/workforce-iam)[Customer Identity / CIAM](/directory/category/ciam)[SSO](/directory/category/sso)[Okta](/directory/okta)[Auth0](/directory/auth0)[Run the IAM Stack Finder](/stack-finder)[Report: The State of AI Agent Identity 2026](/reports/state-of-ai-agent-identity-2026) ## Categories [Workforce IAM](/directory/category/workforce-iam)[Customer Identity / CIAM ★](/directory/category/ciam)[SSO](/directory/category/sso) ## Common use cases - Customer identity for large B2C / B2B portals - Workforce SSO and MFA - Directory consolidation - Identity orchestration across legacy and modern apps ## Strengths - Highly configurable journeys and policies - Strong directory and on-prem heritage - Covers both CIAM and workforce in one stack - Mature in regulated industries ## Limitations & considerations - Implementation can be complex and consulting-heavy - Pricing and packaging shifting post Ping merger - Smaller teams may find it heavier than needed ## Pricing model summary Custom enterprise pricing via sales. No public price list. Typically tiered by use case (CIAM vs. workforce), MAU/employee counts and modules deployed. [View vendor pricing page ↗](https://www.pingidentity.com/en/platform/pricing.html) ## Integrations SAML OIDC SCIM LDAP Active Directory Salesforce ServiceNow ## Fit Company size mid\_market, enterprise Deployment saas, self\_hosted, hybrid Source commercial Pricing model enterprise ## Alternatives & comparisons [Okta](/directory/okta) Okta is a leading cloud-native identity and access management platform offering SSO, MFA, lifecycle management, and identity governance for enterprise workforce and customer-facing applications. [Compare ForgeRock vs Okta →](/compare/forgerock-vs-okta) [Auth0](/directory/auth0) Auth0 is a developer-centric customer identity and access management (CIAM) platform offering authentication, authorization, and user management for web and mobile applications, now operating as Okta Customer Identity Cloud. [Compare ForgeRock vs Auth0 →](/compare/forgerock-vs-auth0) [Microsoft Entra](/directory/microsoft-entra) Microsoft Entra ID is Microsoft's cloud-based identity and access management service, providing SSO, MFA, Conditional Access, and identity governance tightly integrated with Microsoft 365 and Azure. [Compare ForgeRock vs Microsoft Entra →](/compare/forgerock-vs-microsoft-entra) [Ping Identity](/directory/ping-identity) Ping Identity provides enterprise IAM with advanced federation, financial-grade API security, and hybrid cloud/on-premises deployment options, commonly deployed in financial services, healthcare, and government. [Compare ForgeRock vs Ping Identity →](/compare/forgerock-vs-ping-identity) IDSync provides educational buyer guidance based on publicly available information, editorial review, and user-submitted data. Vendor information should be verified before purchase. [Who we are, our methodology & disclosure policy](/about). ForgeRock and its logo are trademarks of their respective owner. IDSync is an independent buyer resource and does not imply endorsement unless explicitly stated. ### Take action [Request vendor shortlist](/request-shortlist)[Run the IAM Stack Finder](/stack-finder)[Request vendor intro](/contact)[Docs ↗](https://docs.pingidentity.com/)[Pricing ↗](https://www.pingidentity.com/en/platform/pricing.html) ### Work at ForgeRock? Claim this profile to keep it current. Claim this profile [![IDSync home](/assets/idsync-logo-BKS89EW4.png)](/) The buyer-focused platform for identity, access, and authentication software. #### Platform - [Home](/) - [IAM Stack Finder](/stack-finder) - [Directory](/directory) - [Resources](/resources) - [State of AI Agent Identity 2026](/reports/state-of-ai-agent-identity-2026) - [Buyer Guides](/guides) - [Glossary](/glossary) - [Newsletter](/newsletter) - [Newsletter Archive](/newsletter/archive) #### Best of guides - [All comparisons](/compare) - [All vendor alternatives](/alternatives) - [Best SSO tools](/compare/best-sso-tools) - [Best MFA tools](/compare/best-mfa-tools) - [Best PAM tools](/compare/best-pam-tools) - [Best IGA tools](/compare/best-iga-tools) - [Best CIAM tools](/compare/best-ciam-tools) - [Best passwordless auth](/compare/best-passwordless-authentication-tools) - [Best identity security](/compare/best-identity-security-tools) - [Best machine identity](/compare/best-machine-identity-tools) - [Best SaaS access governance](/compare/best-saas-access-governance-tools) - [Best developer auth](/compare/best-developer-authentication-tools) - [Best for startups](/compare/best-iam-tools-for-startups) - [Best for enterprises](/compare/best-iam-tools-for-enterprises) - [Best SCIM tools](/compare/best-scim-provisioning-tools) - [Best for AI agents](/compare/best-ai-agent-identity-tools) - [Best NHI tools](/compare/best-nhi-management-tools) - [Okta pricing explained](/guides/okta-pricing) - [Auth0 pricing explained](/guides/auth0-pricing) - [Okta alternatives](/alternatives/okta) - [Auth0 alternatives](/alternatives/auth0) #### For Vendors - [Sponsor](/sponsor) - [Badges](/badges) - [Submit Product](/submit-product) - [Claim Profile](/claim-profile) - [Partner](/partner) #### Company - [About & Methodology](/about) - [Contact](/contact) - [Privacy](/privacy) Vendor names, logos, and trademarks are the property of their respective owners. IDSync is an independent buyer resource and does not imply endorsement unless explicitly stated. Logos are displayed for identification purposes only. IDSync (idsync.com) is operated by TetraCore, Bowling Green, Ohio. It is not affiliated with the IDSync® Active Directory synchronizer by Identity Syncronizer — [learn more](/about#idsync-disambiguation). © 2026 IDSync. All rights reserved. Editorial independence. Sponsored placements are clearly disclosed.