Ping Identity Announces PingTrust 1.1 Available for Immediate Download

First Standalone WS-Trust Security Token Server Expands Token Support and Increases Configuration Options

May 4, 2006; 08:29 AM

DENVER - Ping Identity Corporation, the leading provider of federated identity and Web single sign-on software, today announced that PingTrust version 1.1 is now available for free and immediate download from its Web site, www.pingidentity.com. New features in PingTrust v1.1 include additional security token support, new configuration options and a test harness for validating configurations.

PingTrust is the first standalone Security Token Server that builds on the OASIS Web Services Security (WSS) and WS-Trust standards to centralize security token management across the enterprise. PingTrust provides rich clients, Web applications and the back-end Web Services they utilize with comprehensive functionality to create, validate and exchange security tokens such as SAML assertions, X.509 certificates, Kerberos tickets, username/password and custom tokens. PingTrust effectively bridges authentication domains while enabling enterprises to add user identity to Web Services for enhanced billing, authorization and audit.

Web Service Clients use PingTrust to generate security tokens that transfer attributes about the originating user such as name and role to a Web Service Provider. Web Service Providers use PingTrust to validate the authenticity of incoming security tokens and to obtain the user information. Both Web Service Clients and Providers can also use PingTrust to exchange one token type for another--for instance, to exchange a Kerberos token that works in a local Windows security domain for a SAML token that works across multiple security domains.

Key new functionality in PingTrust v1.1 includes:

-- Expanded Token Validation: Validates SAML 1.1 and SAML 2.0 tokens, supporting use cases where a Web Service Provider wants to use the WSS SAML token profile to protect its Web Services.

-- Custom Security Token Generation: Generates custom security tokens. As a result, PingTrust can now convert standard tokens--for instance, Kerberos tickets or SAML assertions--into the unique, custom formats required for homegrown or legacy systems.

-- Enhanced Requestor Authentication and Identification: Allows the use of WSS to authenticate Web Service Clients and Providers requiring token processing, as well as the ability to bypass authentication in favor of simple identification in cases where full authentication is not required.

-- Requester-Specified Token Types: Introduces a new option whereby Web Service Clients and Providers can specify in their request the type of token they want generated. This functionality supports Web Service Clients that require multiple token types to work with different Web Service Providers.

-- Test Harness/Demonstration Application: Includes a browser-based application that allows users to directly interact with PingTrust in real time to configure a token processing scenario, execute requests and view the results from both the Web Service Client and Provider perspectives. With this functionality, implementers can see PingTrust "in action" and verify that their configuration is correct.

-- Web Service Enhancements Version 3.0 (WSE 3.0): Adds support for WSE 3.0 and version 2.0 of the .NET Framework. Furthermore, the new version can simultaneously support applications running WSE 2.0/.NET 1.1 and WSE 3.0/.NET 2.0.

Pricing and Availability

PingTrust v1.1 is now available and can be downloaded directly from Ping Identity by going to www.pingidentity.com. Under Ping Identity's innovative Sign On Now! Program, organizations can use PingTrust for development, pilot testing and production deployment absolutely free for the first 100,000 transactions or six months, whichever comes first. Subscription-based, limited and unlimited use licenses are available, as well as support agreements. For more information, please contact Ping Identity at 877.898.2905 (+1 303.468.2882 outside North America) or [email protected].

About Ping Identity Corporation

Ping Identity Corporation (www.pingidentity.com) provides enterprise software and services for standards-based Web single sign-on and federated identity management. Ping Identity's products focus exclusively on open standards, lightweight and cost-effective solutions that are easy to deploy and manage. Ping's customers include American Express, E*Trade, Fidelity Investments, Sprint, Cisco, Siebel, Merck, New York Life, TriNet, Mercer and Allscripts.

All other product and service names mentioned are the trademarks of their respective companies.

ing Identity Corporation, Mike Donaldson, 303-468-2858, [email protected], or Groshelle Communications, Heidi Groshelle, 415-563-1893, [email protected]