PingID is feature rich. We've prototyped some of their step-up authentications. In certain circumstances, like geofencing, they can waive the MFA requirement because they're in a trusted area that's physically secured. We've prototyped that but have not rolled anything like that out. So, the aforementioned details can be considered for future improvements and changes in the product.

PingID should put a little more effort into making a pretty self-explanatory deck about their tech features and the services they offer. I suggested this improvement directly to the sales manager, who was friendly enough to take that feedback.

The management console needs to be improved. PingID should revise it.

Many times when we are authenticating, we'd like the freedom to set the time. Maybe it needs to be slightly longer. I understand that this is work based on the token exchange and so on. The timing of the token validity, if it could be extended, would be great. I'm not sure if there is even an option to configure these types of settings. 

Before we can authenticate it, it ends up in an error. And then we'll have to create everything all over again, in terms of launching the application.

I'm not sure if the experience on the desktop is good or not. I've heard some feedback that it's not that good. It's better to use it on mobile. Perhaps the user experience on the desktop Ping application could be improved. I haven't used it personally. I just heard from my colleagues about some experience with that.

We have encountered instances where it is not easy to do authentication. 

PingID's device management portal should be more easily accessible via a link. They provide no link to the portal like they do for the service. The passwordless functionality could be more comprehensive. You can't filter based on hardware devices. Having that filtering option would be great. Device authentication would be a great feature. 

PingID classifies the type of environment into internal and external, with the internal environment for internal users and the external environment for external users. For example, the external users would be cabin crew members who log in using the mail ID through multifactor authentication. This is an area for improvement in PingID because you need to take additional steps so you can trust both internal and external users.

My company had to use the CIDR authentication selector as an additional step, through policy creation in the PingFederate website, with the help of trusted IP, where all people belong to a particular network, then my company needs to do some IP load balancing. My company had to configure the particular IP in the CIDR authentication selector, then only then can it classify users into internal or external.

An internal user doesn't need to do multifactor authentication, but an external user will be redirected to a request from the PingFederate console, and then, based on the user authentication method, through biometrics, the user will be authenticating from Active Directory. If the user is valid, authenticated, and the authorization is approved, the user will then be redirected to the application.

The product is not customizable. It is not suitable for consumer identity management.

PingID would benefit from a better user interface for integration. Currently, we are doing manual configuration for a changeover. If some of the scripts could be automated, the integration would be faster, and we would reduce the manual effort.

They should promote more buyer's authentification, like a fingerprint or face recognition, something that's more convenient.

They could use some bio-certification. It's just more user-friendly and more convenient than entering the one time passes. That would be an improvement.

If the solution is going to compete with Microsoft, they need to offer more unique functionality to keep their current user base.

The administrative aspects of the solution could be more granular.

The solution should allow for better integration with other platforms and the UBT.

The solution needs to offer stronger support for the password-less authentication.

I think that the connection with like Microsoft Word, especially for Office 365, is a weak point that could be improved.

The legacy applications remain an issue. There also is a tendency for downtime and network issues. Also, it has a long way to go until it is a cloud-based solution.