Gateways & agents
Integrate PingOne Advanced Identity Cloud with PingGateway and policy agents to secure access to your web resources.
PingGateway
PingGateway integrates your web applications, APIs, and microservices with Advanced Identity Cloud. PingGateway enforces security and access control without modifying your applications or the containers where they run—whether on premises, in a public cloud, or in a private cloud.
Based on reverse proxy architecture, PingGateway intercepts client requests and server responses. In this process, PingGateway enforces user or service authentication and authorization to HTTP traffic. Advanced Identity Cloud acts as the authentication and authorization provider.
PingGateway can also conduct deep analysis, then throttle and transform requests and responses when necessary.
Learn more in the PingGateway Guide for Advanced Identity Cloud. In particular, refer to these detailed instructions and examples:
Policy agents
Policy agents are PingAM add-on components. They operate as policy enforcement points (PEPs) for websites and applications.
Policy agents natively plug into web or applications servers. The agents intercept inbound requests to websites, and interact with AM to:
-
Ensure that clients provide appropriate authentication.
-
Enforce AM resource-based policies.
Use Web Agents to protect services and web resources hosted on a web or proxy server. Use Java Agents to protect resources hosted on application or portal servers.
Although both agents enforce authentication and authorization to protected resources, they differ in the way they derive policy decisions and enforce them.
For examples of how to transition from on-premises access management to Advanced Identity Cloud without changing the architecture of the agent-based model, learn more in these guides:
- Web Agent Example
- Java Agent Example