Many organizations that want to migrate to the cloud are concerned about the migration process. They have a mix of IT infrastructure platforms, legacy on-premise, and private and public cloud environments, and not only want to balance stability and change, but also want to make changes when and where it makes sense.

Most often, identity and access management (IAM) teams are most concerned about the complexity involved in either moving some or all of their functions to the cloud. Every organization is different. They have different needs, timeframes, and budgets, which is why they can choose to migrate everything at once, in a flash cut-over situation, or they can migrate when it makes the most sense for their organizations.

Flash cut-over migration

Flash cut-over migrations most often occur when organizations move from on-premise Ping solutions to a Ping cloud solution.

Flash migration

With flash cut-over migrations, the goal is to keep downtime to a minimum and complete the migration as quickly as possible.

Although these migrations are considered riskier than phased migrations, Ping Identity Professional Services experts are involved in every step to ensure that they run smoothly.

Phased migration

Phased migrations most often occur when organizations move from their current solution (legacy, homegrown, or on-premise Ping solution) to the PingOne Cloud Platform. Phased migrations are popular because many organizations want to mitigate the migration risk by moving small groups of users and applications during each phase.

Phased migration

Many organizations face time or budget restraints, or regulations that prevent them from immediately moving some systems to the cloud.

PingOne Advanced Services is designed for hybrid IT situations, where organizations manage some of their IT resources in-house but use cloud-based services for others.

Most importantly, PingOne Advanced Services can connect to anything and everything, including legacy systems based on proprietary standards. This solution can also integrate with on-premise data or authentication sources, and act as either an identity provider (IdP) or a service provider (SP), which makes complex authentication flows possible.

Every organization is different and will follow a different path to the cloud, which might look something like the following image.


This image illustrates the migration process. Before migration, a variety of systems and applications might be be intertwined in a complicated manner. During the migration, PingOne coexists with legacy systems in a simplified manner, and after the migration, PingOne is in place.