What are the Critical Capabilities in Access Management?


Gartner researchers did the heavy lifting for you — read their analysis of 13 critical capabilities and how 9 vendors stack up.

The 2022 Gartner® Critical Capabilities for Access Management (AM) report is a companion to the company's Magic Quadrant for AM. While the Magic Quadrant provides an overall view of a vendor, including its market share, Critical Capabilities is purely a technical analysis of a vendor’s products and services. The researchers evaluated 13 capabilities Gartner believes are critical to the three major Use Cases for Access Management: External Access Management, (CIAM), Internal Access Management (workforce), and Application Development Use Case (for custom-developed applications or services).

In its key findings, Gartner says that Internal Access Management Use Cases have become mainstream, and that vendors are now focused on External Access Management Use Cases, specifically business-to-consumer (B2C), business-to-business (B2B), and government-to-constituent. This year,ForgeRock ranked highest in Application Development and External Access Management Use Case and second highest in Internal Access Management Use Case.

During this past year, we have introduced significant enhancements to our orchestration capabilities. In addition to the largest library of pre-built journey orchestration nodes, we provide a visual interface that makes building AM journeys as simple as dragging and dropping nodes into place, and measuring and adapting them, without writing a line of code.

ForgeRock's strong software development kit (SDK) offering goes beyond authentication to include registration and self-service journeys, token management, device integrity, device context and Web Authentication (WebAuthn) support. All this functionality is available to developers via APIs with documentation praised by Gartner.

For years, ForgeRock has been committing the bulk of its resources to innovative product development, and I believe the results of our efforts have become apparent in the Gartner Critical Capabilities report, the Magic Quadrant, as well as other recent studies by industry analysts.

I'm immensely proud of the work of our engineers, product management, customer success, documentation, and many other teams. And I'm grateful to our customers who constantly inspire us to expand on the possibilities that an identity and access management solution with governance capabilities can bring to an organization. Our focus will remain on developing products and services that simplify our customers’ incredibly complex challenges in today’s digital landscape.

I invite you to download the Gartner Critical Capabilities report to compare the effectiveness of the recognized access management solutions and how they can impact your organization's digital identity priorities.


*Gartner, Critical Capabilities for Access Management, By Abhyuday Data, Michael Kelley, Henrique Teixeira, Brian Guthrie, James Hoover, 2 November 2022.

Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

GARTNER and Magic Quadrant are registered trademarks and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.