Tools / ForgeRock IAM interview questions
What is ForgeRock IAM and what are its core platform components?
ForgeRock is an enterprise Identity and Access Management (IAM) platform that provides a full suite of identity services — authentication, authorization, identity governance, directory services, and API gateway capabilities — all under a single integrated product family. It is now part of Ping Identity (acquired in 2023) and is sold as PingOne Advanced Identity Cloud in its SaaS form and as the standalone ForgeRock Identity Platform for self-managed deployments.
The platform is built around four core products that work independently or as an integrated stack:
| Component | Former Name | Primary Role |
|---|---|---|
| ForgeRock Access Management (AM) | OpenAM | Authentication, SSO, OAuth 2.0/OIDC, SAML federation, policy enforcement |
| ForgeRock Identity Management (IDM) | OpenIDM | User lifecycle, provisioning, reconciliation, workflow, self-service |
| ForgeRock Directory Services (DS) | OpenDJ | LDAP/REST identity store, token store, configuration store |
| ForgeRock Identity Gateway (IG) | OpenIG | Reverse proxy, API gateway, OAuth2 token relay, protocol translation |
AM is the most interview-tested component — it handles all authentication and authorization decisions. DS backs AM's session and CTS (Core Token Service) storage. IDM manages the full user lifecycle including connector-based provisioning to HR systems, Active Directory, and cloud apps. IG protects legacy applications that cannot natively speak OAuth2 or SAML by acting as a mediating gateway in front of them.
More Related questions...
