specification: FinOps Framework
specificationVersion: '1.0'
schema: https://www.finops.org/framework/
alignedWith:
  framework: FinOps Foundation Framework
  frameworkUrl: https://www.finops.org/framework/
  dataSpec: FOCUS
  dataSpecVersion: '1.3'
  dataSpecUrl: https://focus.finops.org/focus-specification/v1-3/
provider: ForgeRock
providerId: forgerock
publisherName: Ping Identity Corporation
serviceCategory: Identity
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: true
tags:
  - Access Management
  - Authentication
  - Identity
  - FinOps
  - FOCUS
description: 'FOCUS-aligned FinOps mapping for ForgeRock under Ping Identity ownership: tiered subscription IAM/CIAM with per-seat (Workforce) and per-customer (CIAM) licensing, plus add-ons (Passwordless, DaVinci) and self-hosted enterprise contracts.'
sources:
  - https://www.pingidentity.com/en/platform/pricing.html
  - https://www.forgerock.com/platform/pricing
billingModel:
  pricingCategory: Tiered Subscription
  billingFrequency: Annual
  billingCurrency: USD
  chargeCategories:
    - Purchase
    - Usage
    - Tax
    - Adjustment
    - Credit
focusColumns:
  ServiceName: ForgeRock / PingOne
  ServiceCategory: Identity
  ProviderName: Ping Identity Corporation
  PublisherName: Ping Identity Corporation
  InvoiceIssuerName: Ping Identity Corporation
  BillingCurrency: USD
  ChargeCategory: Purchase
meters:
  - name: workforce_users
    description: Licensed Workforce IAM users (priced per user per month, annual commitment)
    unit: seat-month
    aggregation: max
    dimensions:
      - tier
      - region
      - department
  - name: customer_identity_subscription
    description: Annual CIAM tier subscription (Essential or Plus)
    unit: year
    aggregation: max
    dimensions:
      - tier
  - name: monthly_active_customers
    description: Monthly Active Customers (CIAM consumption metric tracked under PingOne for Customers)
    unit: identity
    aggregation: max
    dimensions:
      - environment
      - region
  - name: authentications
    description: End-user authentication events processed
    unit: event
    aggregation: sum
    dimensions:
      - flow
      - mfa_factor
  - name: addon_passwordless
    description: PingOne Passwordless / DaVinci orchestration add-on consumption
    unit: flow
    aggregation: sum
    dimensions:
      - flow_name
  - name: self_hosted_license
    description: Annual ForgeRock Identity Platform (self-hosted) license fee
    unit: year
    aggregation: max
    dimensions:
      - product
principles:
  - name: Visibility
    description: Pull PingOne admin reports and ForgeRock IDM audit logs into your data warehouse; track Monthly Active Customers and Workforce seats against the contracted minimum (e.g. 5,000-user Workforce floor).
  - name: Allocation
    description: Tag tenants/realms by business unit and environment so seat and MAC consumption is allocable to product lines.
  - name: Optimization
    description: Right-size between Essential and Plus tiers based on which advanced features (orchestration, risk) are actually used; deprovision dormant Workforce seats; consolidate duplicate CIAM tenants ahead of renewal.
  - name: Accountability
    description: Identity engineering owns the platform; security/compliance jointly owns CIAM cost; finance reviews seat utilization and MAC trend monthly and renegotiates the annual contract on usage data.
maintainers:
  - name: Kin Lane
    email: kin@apievangelist.com
    url: https://apievangelist.com