Not yet fully quantum safe. Ping Identity (acquired by Thales in 2023) benefits from Thales's PQC research and Luna HSM PQC capabilities, but PingFederate and PingOne production services have not completed the transition to post-quantum algorithms.
Key Takeaway: Ping Identity is NOT quantum safe. Scan your Ping Identity infrastructure with QScout. Evaluate Thales Luna HSM for PQC key storage to protect signing keys. Monitor Ping Identity product announcements for PQC support.
Ping Identity is NOT fully quantum safe today, but the Thales acquisition improves its PQC outlook. **Current State:** PingFederate, PingOne, and PingAccess use classical TLS, SAML (RSA-SHA256), and OAuth/OIDC (RS256/ES256) — all vulnerable to quantum attack. **PQC Progress:** The Thales acquisition (2023) brings PQC capabilities: - **Thales Luna HSM**: Supports PQC algorithms including ML-KEM and ML-DSA for key storage. - **Thales CipherTrust**: Data protection platform with PQC research. - **PingFederate**: No public announcement of PQC signature support for SAML or OAuth tokens. - **PingOne**: Cloud identity platform uses classical cryptography. **HNDL Risk:** Same cascading identity risk as Okta and Auth0. Compromised SAML/OAuth signing keys enable forgery of authentication tokens across all federated applications. **What Organizations Should Do:** Audit all Ping Identity deployments, SAML configurations, and OAuth/OIDC integrations. Evaluate Thales Luna HSM for PQC key storage. Use QScout to discover all identity cryptographic dependencies.
| Full Name | Ping Identity (Thales) |
| Category | identity |
| Quantum Vulnerability | Ping Identity SAML and OAuth use classical RSA/ECDSA signatures vulnerable to quantum attack. Thales acquisition provides PQC HSM capabilities but product integration is ongoing. |
| NIST Status | Thales (parent company) has NIST PQC support in Luna HSM products. Ping Identity product-level PQC deployment is not publicly confirmed. |
| Deprecation Timeline | Ping Identity has not published product-specific PQC migration timelines. |
| Replaced By | Ping Identity authentication will migrate to ML-DSA for signatures and ML-KEM for key exchange, leveraging Thales PQC capabilities |
Scan your Ping Identity infrastructure with QScout. Evaluate Thales Luna HSM for PQC key storage to protect signing keys. Monitor Ping Identity product announcements for PQC support.
QScout discovers every instance of Ping Identity across your infrastructure in 7 days — with zero operational disruption. 72-hour time to first findings.