Protect and secure your data from cyber attacks
Data Protection
Data Security
Data Insights
The 5 Steps to Cyber Resilience
Cloud & SaaS
Enterprise
Industries
One platform to secure and bring back trusted access for every PingOne environment.
Identity is the foundation for your business. It is the critical security perimeter that decides who gets into your data and systems. Most enterprises run more than one identity provider (IdP) in a hybrid setup: on-premises Active Directory (AD) is federated to cloud IdPs such as PingOne. Attackers don’t care which one you run and they’ll use whichever one opens the door to your network.
PingOne adds its own unique challenges for security and recovery: Organizations that use PingOne can have multiple environments (such as production, sandbox, and regional). Configuration errors can happen at the boundaries between them or one accidental change can break sign-on for everyone. Just like any other cloud service, PingOne gives you limited control over rollback and recovery. It does not protect you from a catastrophic outage caused by a cyberattack.
Hybrid identity raises the stakes further. PingOne federates with other systems through standards such as SAML and OIDC. If you have a vulnerability in PingOne, it can open the door to your other critical apps and services.
Modern identity systems need identity resilience that meets these challenges. Cohesity Identity Resilience is a unified, purpose-built solution for PingOne environments.
Figure 1: PingOne is often federated to on-prem Active Directory as part of hybrid identity. To ensure cloud app and hybrid identity continuity, you need to be able to seucure and rapidly recover PingOne from accidental or malicious change
Cohesity Cloud Services (CCS) provides continuous resilience for your entire PingOne environment. Here’s what you get:
1. Backup by environment Cohesity backs up PingOne configuration objects through the public APIs, scoped to each environment.
2. Targeted recovery Restore an object in full or attributes and relationships. You fix any accidental or malicious changes and leave the rest of the environment alone.
3. Search and reporting Search your configuration history across environments. After an incident, you can see what changed and when, and you can report on it.
4. Advanced identity threat detection and response (ITDR) Configuration changes and security posture reporting feed into the Cohesity Security Center. This allows you to identify what risky changes needs to be remediated and how to harden your PingOne environment.
Figure 2: Secure and rapidly recover objects across your PingOne environments in one unified platform for identity resilience.
Objects protected by Cohesity Identity Resilience
Category
Objects
Environment
Environment metadata (ID, name, type, region) and lifecycle state
Directory and access
Populations, users, groups, nested group relationships, group membership metadata
Applications
OIDC and SAML applications, applica-tion role definitions and assignments, OAuth scopes and consent metadata
Identity providers
Enterprise and social IdPs, attribute mappings, trust and federation metadata
Policies
Sign-on policies, authentication policies, MFA policy configuratio
Administration
Predefined and custom admin roles, en-vironment-scoped admin role assignments
Attackers will use any door you leave open. Without it, your business grinds to a halt and is at risk for extended downtime. That’s why identity resilience is an imperative across your entire hybrid identity environment. Unify, manage, and strengthen identity resilience for your PingOne environment in the same platform you use to protect AD, Entra ID, and Okta. One platform gives your backup, security, and identity teams one view and one path to trusted access and bringing the business back.
