How many non-employee users do you store in your on-premise, enterprise directory? In most organizations, the answer is too many. If you need a way to authenticate customers and partners to give them access to applications, but you don't want to be in the business of storing and managing those identities yourself, we have an alternative. Come learn about PingOne's directory, a user directory available to you in the PingOne IDaaS platform.

2. MULTI-FACTOR FOR ALL,
THE EASY WAY
CIS 2015
Confidential — do not distribute Copyright © 2015 Ping Identity Corp.All rights reserved. 2
Ran Ne’man
Director Products, Strong Authentication and Mobile, Ping Identity

3. SAFE HARBOR STATEMENT
The following is intended to outline our general product direction. It is
intended for information purposes only, and may not be incorporated
into any contract. It is not a commitment to deliver any material, code,
or functionality, and should not be relied upon in making purchasing
decisions.The development, release, and timing of any features or
functionality described for Ping Identity’s products remains at the sole
discretion of Ping Identity.

4. “COMPANIES THAT RELY
ON USER NAMES AND PASSWORDS HAVE
TO DEVELOP A SENSE OF URGENCY
ABOUT CHANGING THIS. UNTIL THEY DO,
CRIMINALS WILL JUST KEEP STOCKPILING
PEOPLE’S CREDENTIALS.”
Avivah Litan
Security Analyst
Gartner
2,803,036 Records Lost or
Stolen Every Day
116,793 Records Lost
or Stolen Every Hour
1,947 Records Lost or
Stolen Every Minute
32 Records Lost or
Stolen Every Second

5. Meet PingID
Copyright © 2014 Ping Identity Corp.All rights reserved. 5
• Multifactor authentication via mobile app for
multiple apps and services, including
PingOne® and PingFederate®
• Define and enforce policies tailored to your needs
• Simple security for end users
• Simple administration for all IT levels

6. Platform Offering
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 6

7. Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 7
FEDERATION SERVER ACCESS GATEWAY &
POLICY SERVER
IDENTITY AS A SERVICE
Components

8. How Can You Make it Easy?
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 8
User Admin Organization

9. SO, HOW EASY CAN IT BE?... DEMO
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 9

10. HOW DOES IT WORK?
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 10

11. How PingID Works
Copyright © 2014 Ping Identity Corp.All rights reserved. 11
USER’S MOBILE DEVICEDESKTOP SIGN-ON

12. How PingID Works

13. Pair Your Device
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 13
User scans the QR code
from the app
Device is registered
and ready for use
User is prompted to install
the PingID mobile app

14. USER SIDE
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 14

15. Authentication For All Users
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 15
H2 2015
H1 2015

16. Wearables Derive Security and User Experience
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 16
H2 2015+

17. ORGANIZATION SIDE
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 17

18. Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 18
Multiple Services and Applications
PingID API VPNs
H1 & H2 2015

19. VPN Integration
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 19

20. Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 20
Enterprise-Grade VPN Agent

21. Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 21
VPN Demo

22. • REST-based API’s
• Developer friendly documentation
• Full API Audit Trail
• Same API modeling across all Ping
Products
Release Defining Features
Authentication and Administrative API’s
Confidential — do not distribute Copyright © 2015 Ping Identity Corp.All rights reserved. 22
H1 & H2 2015

23. SSH Applications
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 23
• Linux / Unix machines with SSH
• Privileged accounts security
• Supports all user side tokens (e.g.YubiKey),
OTP for offline
• On-the-fly pairing
• ForceCommand (ssh, scp…) and
PAM (su, sftp…) integrations
• C code
• APT packaging

24. Adapting to Your Business
Confidential — do not distribute Copyright © 2015 Ping Identity Corp.All rights reserved. 24
H1 & H2 2015

25. ADMIN SIDE
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 25

26. • Users without smartphones
• Locations with poor connectivity
• User Self-Service registration
• Integrated administration
Alternative to Mobile App
YubiKey Hardware Token
Confidential — do not distribute Copyright © 2015 Ping Identity Corp.All rights reserved. 26
H1 2015

27. YubiKey Admin Experience Easy As 1-2-3
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 27
1. Get it 2. Register it 3. Manage it+ +
H1 2015

28. CONTINUOUS CONTEXTUAL
AUTHENTICATION
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 28

29. One Year Ago @ CIS
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 29

30. Fingerprint by Apple Touch ID and Samsung
• Biometrics, first step
• Security + User experience
• Lost and Stolen
• Apple and Samsung
• Gradual rollout
Confidential — do not distribute Copyright © 2015 Ping Identity Corp.All rights reserved. 30
H1 2015

31. Confidential — do not distribute
• Geofencing rules for specific
locations, e.g. campus
• Country Based
• Network Based
• Ground Speed check
• Proximity
Where are your users?
Geo-location as an Authentication Factor
Copyright © 2014 Ping Identity Corp.All rights reserved. 31
H2 2015+

32. Device Posture and Pairing Rules
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 32
• Session management
• Device model and OS version
• iOS Vs.Android
• Device Lock
• Company issued
• Rooted / Jailbroken
H2 2015+

33. And One Engine To Govern Them All
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 33
H2 2015+
…

34. The Customer Perspective
Copyright © 2014 Ping Identity Corp.All rights reserved.34
One secure app to authenticate any
employee, partner or customer
One authentication service for
any cloud, web,VPN or mobile service
Service
Benefits
Contextual going
to continuous
authentication
Lower TCO – no on-prem
or transaction costs
More than access—brand
and fit for yourself
Use across channels—
mobile, online, call
center, POS
A piece of the IAM
platform

35. Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 35
What’s Next?

36. What’s Next?
Confidential — do not distribute Copyright © 2014 Ping Identity Corp.All rights reserved. 36

37. Thank You
rneman@pingidentity.com