ForgeRock

Name: ForgeRock
Brand: ForgeRock

Leader

Simply and Safely Access the Connected World. ➡️ Follow us at Ping Identity

Est 2010|Valuation $2.1B|Raised $552.9M|11 Ref Customers

LinkedIn 75K|Web traffic 3K|FTEs 923|HQ San Francisco, California, US

MarketsIdentity Provider (IdP) & SSO Identity Provider (IdP) & Single Sign-On (SSO)Identity Governance & Administration (IGA)

Published Oct 21, 2026

01Common complaints

Choose an alternative when: 1. Rapid time-to-value and low administrative overhead are primary objectives. Vendors with SaaS-first workforce identity offerings often provide faster rollout and simpler administration. 2. The organization is small or early-stage; implementation cost and complexity can be disproportionate for small teams. 3. Transparent, predictable self-serve pricing is required; some competing solutions publish entry tiers suitable for smaller deployments. 4. The primary requirement is standard CIAM tightly integrated with a Microsoft-first architecture; Microsoft offerings may provide cost advantages and integration benefits. 5. Sensitivity to vendor transitions and product consolidation is high; the combined Ping/ForgeRock portfolio may change packaging and support over time—require contractual roadmap commitments where continuity is critical.

Disqualifiers (poor fit)

Need for a self-serve SaaS with minimal customization.
Lack of IAM engineering resources and no desire to engage a systems integrator.
Requirement for a simple workforce SSO rollout with immediate time-to-value (other vendors may be a better fit).

Known limitations from documentation and user feedback

- UI customizations may not migrate cleanly across major platform versions; migration guidance is provided but migration can require significant effort. - API changes across major versions can require application refactoring. - Backup and restore performance has been reported as an issue in very large or many-realm scenarios. - Some customers report delayed vendor support or slower ramp-up for newer deployment patterns such as Kubernetes; confirm current support coverage for containerized deployments.

Roadmap uncertainty (post-merger)

Because ForgeRock is now part of a combined Ping Identity portfolio, confirm product naming and SKU continuity, support SLAs, and upgrade paths (for example, from self-managed to cloud or to managed services).

02Why they buy

Validated advantages (neutral phrasing)

- Enterprise extensibility and SDK availability: reviewers reference SDKs and integration capabilities, particularly for Java-based applications. - Reported capacity for large-scale identity deployments: vendor and third-party materials reference deployments at substantial scale; these references should be validated through procurement reference checks and architecture reviews. - Multiple deployment models: options for cloud, self-managed, and hybrid deployments are documented, along with migration guidance for identity store patterns.

Where competitors have advantages

Ease of use and speed: other vendors often provide faster developer onboarding and day-one productivity.
Pricing transparency: some competitors publish entry-level pricing and clear tiers, which can simplify procurement decisions for smaller programs.

03Field reports

Review platforms (G2, Capterra)

G2 and Capterra listings include both positive and negative feedback. Positive comments reference a usable administrative interface and useful SDKs; negative feedback highlights documentation gaps, management fragmentation across interfaces, breaking API changes across versions, and variable support responsiveness.

Capterra listings note flexibility and integration capability as common positive points, and mention a learning curve and time investment required for implementation.

Community/social (Reddit, Hacker News)

Public community discussions were reviewed; this analysis relied primarily on review platforms for direct end-user commentary. Additional targeted review of community forums and engineering discussions can be conducted to gather anecdotal deployment experiences and migration/licensing discussions.

Why customers choose ForgeRock (themes)

Based on reviews and product characteristics:

Need for deep customization and extensibility (SDKs, integrations).
Support for complex enterprise and hybrid scenarios.
Reported stability of directory services in some large deployments.

Why some customers leave / churn risks (themes)

Operational complexity and maintenance overhead.
Version or API changes that require refactoring.
Variability in support responsiveness.

Vendor-published scale claims (use with caution)

Third-party articles and vendor materials reference very large ForgeRock deployments and internet-scale identity programs. These claims are indicative of potential scalability but are not independently audited in each source and should be validated with reference checks, architecture descriptions, SLA histories, and clarification of deployment model (cloud vs self-managed).

Migration and customization realities

Vendor documentation highlights that UI and integration customizations may not migrate cleanly between major platform versions. This supports the common buyer experience that upgrades can require project-level effort rather than simple patching. If an organization has extensive UI or workflow customizations, budget and schedule should include time for rework and regression testing.

04Best fit

Company sizes

Mid-market to large enterprise organizations with dedicated IAM/security teams.
CIAM programs with very large identity volumes are within the platform's reported use cases, but claims should be validated.

Industries

Financial services, insurance, healthcare, retail, travel/hospitality, and public sector—industries that often require strong security controls and legacy integration.

Buyer personas

CISO / IAM program owner
Identity architects
Security engineering and platform teams
Digital product engineering leaders (for CIAM)

Qualification criteria (good fit)

Requirement for hybrid deployment or significant on-prem footprint.
Expectation to build custom identity journeys, policies, and integrations.
Availability of (or plan to hire) experienced IAM specialists.

05The pitch

What the product does (core value proposition)

ForgeRock is an enterprise Identity & Access Management (IAM) and Customer Identity & Access Management (CIAM) platform used to authenticate users, manage identities and profiles, enforce access policies, and integrate identity controls across web/mobile apps, APIs, and legacy/on-prem systems. It is typically deployed in complex, high-scale environments (large B2C identity bases, regulated industries, hybrid infrastructure) where customization and extensibility matter. ForgeRock is historically known for products such as: - Access Management (AM / formerly OpenAM lineage): Authentication, SSO, federation, adaptive/risk policies - Identity Management (IDM / OpenIDM): Provisioning, lifecycle (joiner/mover/leaver), connectors - Directory Services (DS): LDAP directory and identity store - Platform-level orchestration / workflows and APIs

Target market and positioning

Primary: Large enterprises and public sector organizations with complex IAM/CIAM needs, hybrid architectures, and significant customization requirements.
Positioning: an enterprise identity platform designed for configurability and extensibility rather than a simple plug-and-play SaaS.
Common scenarios: CIAM at internet scale, legacy modernization, regulated identity programs, identity platform consolidation.

Get a comprehensive analysis of ForgeRock including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →