ForgeRock Authenticator

Spec sheet

Purpose

The app provides multi-factor authentication for users logging in to protected resources.Read 12 Oct 2026 · docs.pingidentity.com

Audience

Ping describes its company as an enterprise identity and access management and identity security platform provider.Read 11 Oct 2026 · pingidentity.com

Free plan

YesRead 21 Sep 2026 · docs.pingidentity.com

Support

Ping directs users to its Support Portal to submit a support request and to its Support Center for legacy ForgeRock product resources.Read 12 Oct 2026 · pingidentity.com

Account support

The app can register multiple accounts and multiple authentication methods within each account.Read 11 Oct 2026 · docs.pingidentity.com

Alternative apps

PingAM documentation says third-party apps that support the TOTP open standard, such as Google Authenticator or Salesforce Authenticator, can be used for MFA.Read 12 Oct 2026 · docs.pingidentity.com

Authentication methods

It supports push authentication notifications and one-time passwords, including HOTP and TOTP.Read 12 Oct 2026 · docs.pingidentity.com

Code type

totp and hotpRead 21 Sep 2026 · docs.pingidentity.com

Compatible servers

The product page lists PingOne, PingOne Advanced Identity Cloud, PingAM, and PingFederate as supported servers.Read 12 Oct 2026 · docs.pingidentity.com

Compatible services

The app can be used in PingOne Advanced Identity Cloud and PingAM authentication journeys.Read 11 Oct 2026 · docs.pingidentity.com

Device policy

Authenticator app policies can prevent operation on rooted devices, for example.Read 12 Oct 2026 · docs.pingidentity.com

Download

The app is free to download for Android and iOS.Read 11 Oct 2026 · docs.pingidentity.com

Internet requirement

Internet access is required to register for push notifications, while OTP registration does not require an internet connection.Read 11 Oct 2026 · docs.pingidentity.com

Multiple accounts

The app can register multiple accounts and multiple authentication methods within each account.Read 12 Oct 2026 · docs.pingidentity.com

Offline OTP

An internet connection is not required to register for OTP authentication, but internet access is required to register for push notifications.Read 12 Oct 2026 · docs.pingidentity.com

Product direction

Ping recommends switching to the PingID mobile app, which supports one-time passcodes and push notifications from Advanced Identity Cloud and AM.Read 12 Oct 2026 · docs.pingidentity.com

Push approvals

YesRead 21 Sep 2026 · docs.pingidentity.com

Recovery

The documentation instructs users to save recovery codes separately because they are shown only once and can be used if a device is lost, stolen, or broken.Read 12 Oct 2026 · docs.pingidentity.com

Registration

Users register the app with an identity provider once for each authentication method and can register by scanning a QR code.Read 12 Oct 2026 · docs.pingidentity.com

SDK integration

Customers can integrate the Authenticator module into their own apps using Ping ForgeRock SDKs for Android, iOS, and JavaScript.Read 12 Oct 2026 · docs.pingidentity.com

Security configuration

PingAM allows administrators to configure encryption for stored OATH device profiles, including AES-256/HMAC-SHA-512 or AES-128/HMAC-SHA-256 with RSA key wrapping; its default is no encryption of device settings.Read 11 Oct 2026 · docs.pingidentity.com

Server and SDK support

The authenticator module lists PingOne, PingOne Advanced Identity Cloud, PingAM, and PingFederate as server support, and Android, iOS, and JavaScript SDKs.Read 11 Oct 2026 · docs.pingidentity.com

Supported platforms

iOS,AndroidRead 21 Sep 2026 · docs.pingidentity.com

Third-party support

AM can use third-party authenticator apps that support the TOTP open standard, including Google Authenticator and Salesforce Authenticator.Read 11 Oct 2026 · docs.pingidentity.com

Plans and prices

Every ForgeRock Authenticator plan and price →

Where Specifiction places it

• Authenticator apps#19 of 1118.5