ForgeRock Identity Orchestration

Identity and access management (IAM) is positioned as a foundational enterprise capability for protecting digital assets by ensuring the right people, applications/workloads, and devices access the right resources at the right time. It supports least-privileged access within a Zero Trust framework, and identity orchestration is presented as the core mechanism for achieving end-to-end visibility across identities and entitlements, consolidating identity silos, and governing access consistently across cloud and legacy on-prem systems. In hybrid environments, a unified IAM platform enables consistent access and boosts workforce productivity through capabilities like single sign-on, while also improving customer experiences by reducing friction and enabling targeted digital journeys that increase satisfaction and loyalty.

Identity orchestration is emphasized as essential for building secure, friction-appropriate “identity journeys” for both workforce and customers. For employees and partners, orchestration addresses the complexity created by constant role changes and offboarding, reducing the risk of over-provisioned access by granting, revoking, and deactivating accounts appropriately. For customers, orchestration is framed as a competitive differentiator: better digital experiences can reduce abandonment and improve conversion, while stronger security and privacy controls are needed amid significant online fraud such as account takeover.

ForgeRock’s Identity Platform unifies multiple IAM components and is supported by the ForgeRock Trust Network of roughly 150 partners. ForgeRock Intelligent Access (“Trees”) provides no-code, drag-and-drop orchestration using hundreds of out-of-the-box nodes plus partner integrations, enabling rapid design, testing (including A/B testing), deployment, and measurement of journeys. Integrated AI-driven threat protection (Autonomous Access) enables real-time, continuous risk-based authentication. The solution includes passwordless authentication and passkeys with WebAuthn/FIDO2 support, progressive profiling to reduce form fatigue, multi-brand and organizational hierarchy capabilities, and journey analytics dashboards. Key challenges include Java runtime dependencies and missing journey version rewind and stage-based rollout/approval controls.

• IAM enables enterprises to manage and govern identities and the assets they are authorized to access.
• Unauthorized access is identified as a leading cause of data breaches.
• ForgeRock was founded in 2010 and is headquartered in San Francisco, U.S.
• The ForgeRock Identity Platform includes Access Management, Identity Management, IoT/Edge Security, Identity Gateway, Identity Governance, Privacy & Consent Management, and Directory Services.
• The ForgeRock Trust Network consists of approximately 150 partner companies.
• ForgeRock Intelligent Access is colloquially known as “Trees.”
• Intelligent Access includes a library of hundreds of out-of-the-box nodes for building journeys.
• More than 150 pre-built partner integrations are available through the ForgeRock Trust Network at no additional cost.
• Three WebAuthn nodes are included: credential creation, credential usage, and adding FIDO2 device information to a user profile.
• Intelligent Access currently lacks the ability to rewind and rework earlier versions of journeys, and a stage-based rollout/approval approach is also missing.

• “Identity and access management (IAM) is a core component of the enterprise IT infrastructure and central to protecting digital corporate assets.”
• “A well-constructed identity orchestration tool in IAM can help organizations gain end-to-end visibility of all identities and entitlements.”
• “Identity orchestration is at the heart of delivering frictionless user experiences.”
• “People are constantly moving, changing roles, and leaving companies, which leads to the risk of over-provisioned access.”
• “The digital experience served can mean the difference between customer acquisition and conversion or a lost opportunity and shopping cart abandonment.”
• “No-code orchestration accelerates journey development and time to market.”
• “ForgeRock Autonomous Access applies artificial intelligence, machine learning, and advanced pattern recognition in real time during authentication to minimize friction and improve the overall experience for trusted users.”
• “ForgeRock’s progressive profile capability in identity orchestration simplifies registration and removes the potential for ‘form fatigue’ by collecting a minimum of information at registration and requesting a little more information in subsequent logins.”
• “Intelligent Access provides a comprehensive user journey analytics tool.”
• “An organization can define a hierarchy of organizations and sub-organizations that can be flexibly grouped by area, such as brands, supplier groups, vendors, and other identities.”