Cybersecurity · head to head
Microsoft Intune vs Ping Identity

Microsoft Intune
Cybersecurity
Manage and protect cloud-connected endpoints across device platforms, apps and operating systems
- From
- $8/month
- Rated
- -

Ping Identity
Cybersecurity
Enterprise identity for workforce and customers, with a 5,000 user floor
- From
- $3/month
- Rated
- -
The short version
- Each has a real cost: Microsoft Intune individual add-ons at $2-5/user/month can become expensive when deploying multiple modules; Ping Identity workforce pricing carries a 5,000 user annual minimum, so an organisation with 800 staff pays for 5,000 and the effective per user cost is over six times the list rate.
- Prices and features above were last checked on 1 September 2026.
Where they differ
Only the attributes on which Microsoft Intune and Ping Identity actually diverge.
| Attribute | Microsoft Intune | Ping Identity |
|---|---|---|
| Starting price | $8/month | $3/month |
| Pricing model | subscription | Per user per month |
| Platforms | Web | Web, Linux, Windows |
Identical on both: free tier (No), user rating (Not yet rated), category (Cybersecurity).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in Microsoft Intune
Nothing recorded that Ping Identity does not also cover.
Only in Ping Identity
- Single sign-on
- Adaptive MFA
- Identity orchestration
- API access management
- Directory services
- Flexible deployment
- ForgeRock capabilities
What people use each for
The jobs each tool is most often brought in to do.
Microsoft Intune
- Mobile device and endpoint managementnot Ping Identity
- Enterprise device compliancenot Ping Identity
- Privilege access managementnot Ping Identity
- Remote device supportnot Ping Identity
Ping Identity
- A bank that must keep identity data on premises in one country while running SaaS identity elsewherenot Microsoft Intune
- An airline or telco with tens of millions of customer identities needing a directory that holds that scalenot Microsoft Intune
- An enterprise assembling authentication journeys that call several external verification and risk vendorsnot Microsoft Intune
- An existing ForgeRock customer deciding what its upgrade path looks like under Ping ownershipnot Microsoft Intune
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
Microsoft Intune
- Individual add-ons at $2-5/user/month can become expensive when deploying multiple modules
- Full Intune Suite at $10/user/month becomes better value when deploying two or more modules
Ping Identity
- Workforce pricing carries a 5,000 user annual minimum, so an organisation with 800 staff pays for 5,000 and the effective per user cost is over six times the list rate.
- Adaptive multi-factor authentication is in the Plus tier only, doubling the per user price for a capability many buyers assume is standard in a modern identity platform.
- ForgeRock no longer exists as an independent product, so customers who chose it specifically to avoid Ping now face a roadmap set by the vendor they did not pick.
- Thoma Bravo ownership across both merged companies means the commercial priority is margin, and buyers report firmer renewal negotiations than they saw before 2022.
- The portfolio has overlapping components from three product lineages, so scoping a deployment requires vendor architects and the licensing conversation is more complicated than the price list implies.
Pricing, plan by plan
Microsoft Intune
$8/month- Microsoft Intune Plan 1$8/month
- Device management
- Mobile device management
- Basic compliance policies
- Intune Suite (Full)$10/month
- Endpoint Privilege Management
- Enterprise Application Management
- Advanced Analytics
- Intune Suite Add-on: Remote Help$2/month
- Remote device support
- Intune Suite Add-on: Endpoint Privilege Management$2/month
- Privilege access control
Ping Identity
$3/month- PingOne for Workforce Essential$3/month
- Minimum 5,000 users billed annually
- Single sign-on and directory services
- OAuth 2.0, OpenID Connect, SAML and SCIM
- PingOne for Workforce Plus$6/month
- Minimum 5,000 users billed annually
- Everything in Essential
- Adaptive multi-factor authentication
- PingOne for Customers Essential$35000/year
- Flat annual fee
- No-code identity orchestration
- Unified customer profiles
- PingOne for Customers Plus$50000/year
- Flat annual fee
- Everything in Essential
- Adaptive MFA and device management
Which should you pick?
Choose Microsoft Intune if
Nothing in the data separates Microsoft Intune from Ping Identity on the points above - pick on price and on how each one feels to use.
Choose Ping Identity if
- You need single sign-on.
- You work on Web, Linux, Windows.
- You also want adaptive mfa.
Questions people ask
- Is Microsoft Intune or Ping Identity better?
- Neither clearly leads. Microsoft Intune starts at $8/month and Ping Identity at $3/month, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, Microsoft Intune or Ping Identity?
- Microsoft Intune starts at $8/month and Ping Identity at $3/month.
- Does Microsoft Intune or Ping Identity run on more platforms?
- Microsoft Intune runs on Web. Ping Identity runs on Web, Linux, Windows.
- What is Microsoft Intune best used for?
- Microsoft Intune is most often used for mobile device and endpoint management, enterprise device compliance, privilege access management, remote device support. Of those, mobile device and endpoint management and enterprise device compliance are not what Ping Identity is typically brought in for.
- What can Microsoft Intune do that Ping Identity cannot?
- Ping Identity covers Single sign-on, Adaptive MFA, Identity orchestration, API access management.
Answered from the vendors’ own pages
Microsoft Intune: How much does Microsoft Intune cost?
Microsoft Intune Plan 1 costs $8/user/month for basic device management. The full Intune Suite costs $10/user/month including endpoint privilege management, enterprise application management, advanced analytics, remote help, Intune Plan 2, and Microsoft Cloud PKI.
SourcePing Identity: Can I still buy ForgeRock?
Not as a separate product. Ping acquired ForgeRock in 2023 and the capabilities are sold within the Ping portfolio. Existing customers should ask about the specific migration path for their components.
Microsoft Intune: What add-ons are available for Microsoft Intune?
Individual Intune Suite add-ons range from $2-5/user/month and include Endpoint Privilege Management, Enterprise Application Management, Advanced Analytics, Remote Help, Intune Plan 2, and Microsoft Cloud PKI. Microsoft recommends the full Intune Suite at $10/user/month when deploying two or more modules for better value.
SourcePing Identity: What is the real minimum spend?
PingOne for Workforce Essential is 3 USD per user per month with a 5,000 user annual minimum, so roughly 180,000 USD a year before anything else.
Microsoft Intune: Is Intune included in Microsoft 365 E5?
Starting in CY26 Q3, Intune Suite capabilities are included with Microsoft 365 E5 and E7 subscriptions, with select capabilities also in Microsoft 365 E3. These bundled versions do not have separate additional pricing.
SourcePing Identity: Is MFA included?
Basic authentication policies are in Essential. Adaptive MFA and passwordless require the Plus tier at 6 USD per user per month.
Related pages
More on Microsoft Intune
More on Ping Identity
Other head to heads
- Microsoft Intune vs Tanium
- Microsoft Intune vs LastPass
- Microsoft Intune vs 1Password
- Microsoft Intune vs Bitdefender Total Security
- Microsoft Intune vs Norton 360
- Microsoft Intune vs SentinelOne Singularity
- Microsoft Intune vs HashiCorp Vault
- Microsoft Intune vs BigID
- Microsoft Intune vs Transcend
- Microsoft Intune vs DataGrail
- Microsoft Intune vs JumpCloud
- Microsoft Intune vs NICE Actimize
- Microsoft Intune vs Frontegg
- Microsoft Intune vs HashiCorp Boundary
- Microsoft Intune vs Infisical
- Microsoft Intune vs McAfee Total Protection
- Microsoft Intune vs Entrust Identity as a Service
- Microsoft Intune vs Speakeasy
- Microsoft Intune vs Akeyless
- Microsoft Intune vs authentik
- Microsoft Intune vs Logto
- Microsoft Intune vs Authelia
- Microsoft Intune vs Transmit Security
- Microsoft Intune vs Delinea
- Microsoft Intune vs Genetec Security Center
- Microsoft Intune vs VMware Carbon Black
- Microsoft Intune vs Rhombus Systems
- Microsoft Intune vs Yoti
- Microsoft Intune vs Avast One
- Microsoft Intune vs Chainguard
- Microsoft Intune vs Cosign
- Microsoft Intune vs CyberGhost VPN
- Ping Identity vs Tanium
- Ping Identity vs LastPass
- Ping Identity vs 1Password
- Ping Identity vs Bitdefender Total Security
- Ping Identity vs Norton 360
- Ping Identity vs SentinelOne Singularity
- Ping Identity vs HashiCorp Vault
- Ping Identity vs BigID
- Ping Identity vs Transcend
- Ping Identity vs DataGrail
- Ping Identity vs JumpCloud
- Ping Identity vs NICE Actimize
- Ping Identity vs Frontegg
- Ping Identity vs HashiCorp Boundary
- Ping Identity vs Infisical
- Ping Identity vs McAfee Total Protection
- Ping Identity vs Entrust Identity as a Service
- Ping Identity vs Speakeasy
- Ping Identity vs Akeyless
- Ping Identity vs authentik
- Ping Identity vs Logto
- Ping Identity vs Authelia
- Ping Identity vs Transmit Security
- Ping Identity vs Delinea
- Ping Identity vs Genetec Security Center
- Ping Identity vs VMware Carbon Black
- Ping Identity vs Rhombus Systems
- Ping Identity vs Yoti
- Ping Identity vs Avast One
- Ping Identity vs Chainguard
- Ping Identity vs Cosign
- Ping Identity vs CyberGhost VPN
