Ping Access
PingAccess is an identity-enabled access management product that protects Web Applications and APIs by applying security policies to client requests. It works in conjunction with PingFederate to integrate identity-based access management policies using a federated corporate identity store using open standards access protocols.
Access requests are either routed through a PingAccess Gateway to the target Site, or they are intercepted at the target web application server by a PingAccess Agent, which in turn coordinates access policy decisions with a PingAccess Policy Server. In either instance, policies applied to access requests for the target Application are evaluated, and PingAccess makes a policy-based decision to grant or deny access to the requested resource. When access is granted, client requests and server responses can be modified to provide additional identity information required by the target Application.
Duration: 30hrs
Course Content:
Overview of OAuth
Overview of Openid Connect
PingFederate as OAuth Administration Server
PingFederate as Openid Connect Administration Server
Resource Client and Token Validation with PingFederatef
Overview of Token Translation with PingFederate STS (WS-Trust)
Introduction to PingAccess
- Overview
- PingAccess Components
- Deployment Models
- Ping Access Agents
- Ping Access Agents High Level Flow
- Log and Configuration File Location
- Virtual Hosts
- Web Sessions
- Identity Mapping
- Token Mediation
- Sites
- Applications
- Installation of PingAccess agent
- Applications
- Rewrite Rules
- WAM Access Control Rules
- API Access Control Rules
- Session Management
- Administration API
- Performance Tuning
- SSL , Certificates and Trust Stores
- Monitoring and Backup
- Clustering