Try our new research platform with insights from 80,000+ expert users

F5 BIG-IP Access Policy Manager (APM) vs ForgeRock comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

F5 BIG-IP Access Policy Man...
Ranking in Access Management
10th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
17
Ranking in other categories
Secure Web Gateways (SWG) (17th), Network Access Control (NAC) (8th), SSL VPN (5th), Remote Access (11th)
ForgeRock
Ranking in Access Management
9th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
30
Ranking in other categories
Identity Management (IM) (12th), Customer Identity and Access Management (CIAM) (5th)
 

Mindshare comparison

As of May 2025, in the Access Management category, the mindshare of F5 BIG-IP Access Policy Manager (APM) is 1.9%, down from 2.6% compared to the previous year. The mindshare of ForgeRock is 7.0%, up from 6.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Access Management
 

Featured Reviews

Ashish Kumar Rai - PeerSpot reviewer
Offers remote access control, good GUI and easy to configure
I'd suggest improved documentation integration directly within the GUI. Right now, finding comprehensive documentation often requires going to external websites like the community portal. In the APM interface itself, they could add direct hyperlinks to relevant online documentation. This would provide easy access to admin guides and other resources when working within the GUI.
Trisha Bhola - PeerSpot reviewer
It's easier to customize and maintain our code
I worked on two different projects based on ForgeRock, and both are automated deployments. One is a UI-based deployment. It's an automated process using some scripts. The deployments are done through Octopus, so it's also automated. We first deploy the essential components of AM and then implement additional configurations like Amster Imports. After that, we import all the SAML Federation data and add some certificates. We have two teams of five and three team members working on the different deployment processes. One is working on the dev side, another is looking at the higher environment, and one is managing the data. In another project, I'm the only developer. We also deploy on the dev environments so that anyone can test new features, configurations, and client requirements. They can test it on the dev environment, but a team of four people manages higher environments. The Access Management component involves the most customization, which takes around 15 to 20 minutes because of the need to import the Amster configuration. If another deployment is simultaneously happening, it may be a little slower and take around 30 minutes. The other components, like the user data stores, take about five to seven minutes. It's another five to 10 minutes for Identity Management. After deployment, the maintenance is mostly checking for security vulnerabilities. If ForgeRock shares security vulnerabilities or advisories, we check to see if there is something inside we need to maintain. Other than that, we just install updates when they add features each month.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"In my opinion, the GUI is perfect with the configuration options provided. F5 BIG-IP has given customization options and policy configuration tools in the GUI. It's good and good enough to work."
"Our customers have never complained about the stability"
"The most valuable feature is the virtual IP creation. It's our most frequently used feature."
"Our organization is small - a college with about 3,500 students. We use F5 BIG-IP Access Policy Manager to protect our site, especially from the Iranian attacks we faced last year. We restrict access to only inside the country."
"The portal access was very good."
"The load balancing features are valuable."
"We have seen a return on investment from F5 BIG-IP Access Policy Manager. It provided access at a time when we didn't have it."
"The product allows us to create customized portals for your users."
"The most valuable features of ForgeRock are social login and data protection."
"This is a stable solution. When you do experience any issues, you will see it in your DB logs or audit logs so you can easily reach a conclusion of might be causing it."
"The product is easy to use in a development environment."
"ForgeRock has CIAM, which other products didn't have, and they have DevOps ready."
"It works very well, especially in Identity and Access Management. It helps detect anomalies in user behavior patterns."
"Even though we have very small business interests with them today, they see that we plan on growing drastically over the next two years. Therefore, we have excellent support and we are now at a point where we are not calling tech support. We pick up a phone and call the Account Manager and they'll get everything resolved for us. We don't have to queue along with everybody else and go through a long process."
"In terms of the tool's operational efficiency, ForgeRock Access Management is used in a lot of environments, different regions, and in different stages of production environments."
"Easy to customize and adaptable to any environment."
 

Cons

"The technical support’s response time must be improved."
"In my opinion, the GUI side needs some improvement based on my usage. Sometimes, it doesn't work as efficiently as the CLI side."
"The price of this product can be improved."
"The main improvement needed for F5 BIG-IP Access Policy Manager (APM) is to integrate into the cloud-delivered services from F5."
"We do not have knowledgeable support teams locally."
"If I could copy and paste objects instead of picking and configuring them from scratch each time, it would be great."
"F5 BIG-IP Access Policy Manager has room for improvement in integration with other products."
"I have had a lot of issues in the past few months with the agents, which was disappointing."
"ForgeRock is an open source solution and is available to everyone but it is not freeware. If you need support, you need a subscription for ForgeRock. Many of its functionalities need to be built up with the help of a consultant."
"I find that it's quite expensive for just an open-source system. Support is quite expensive."
"The solution requires more simplified customization. However, part of the problem is my clients determining their own preferences. Technology can help and do many things, but you have to define your own policies to ensure that the solution or service works within those parameters. Helping customers understand their business and different processes is another issue not relating to the functionality of this solution."
"In an upcoming release, the solution could improve by limiting the need to do customizations."
"The solution's documentation is not very good, and they do not give more details."
"Lacks simplified documentation within the tool that requires use of a separate portal."
"I don't think ForgeRock directly supports integrations with Slack, making it an area where improvements are required."
"The solution's deployment should be made easier."
 

Pricing and Cost Advice

"The tool is a little bit expensive."
"The product is very expensive."
"Recently, they have simplified the licensing"
"I rate the tool's pricing an eight out of ten."
"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."
"ForgeRock is an expensive solution."
"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."
"The pricing of the solution is fair but I do not have the full details."
"It's a bit pricey and could be more competitive."
"ForgeRock's pricing is more competitive than other products."
"Its price is comparable to other products in the market."
"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
11%
Manufacturing Company
10%
Government
10%
Financial Services Firm
24%
Computer Software Company
12%
Insurance Company
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about F5 BIG-IP Access Policy Manager (APM)?
In my opinion, the GUI is perfect with the configuration options provided. F5 BIG-IP has given customization options and policy configuration tools in the GUI. It's good and good enough to work.
What is your experience regarding pricing and costs for F5 BIG-IP Access Policy Manager (APM)?
F5 products are more expensive than other solutions but are valued for their quality and reliability, akin to purchasing a Bentley as opposed to an Audi.
What needs improvement with F5 BIG-IP Access Policy Manager (APM)?
F5 BIG-IP Access Policy Manager (APM ( /categories/application-performance-monitoring-apm-and-observability )) does not have a direction for SaaS. Most solutions focus more on remote access and acc...
What do you like most about ForgeRock?
The most valuable features of ForgeRock are social login and data protection.
What is your experience regarding pricing and costs for ForgeRock?
Our company was considering switching back to Keycloak from ForgeRock, so as to not pay any license fees. ForgeRock also supports M-PIN and biometric features that Keycloak does not provide. My com...
What needs improvement with ForgeRock?
In the past, I saw that Splunk was integrated with a testing portal, and then it was integrated with Slack. I don't think ForgeRock directly supports integrations with Slack, making it an area wher...
 

Also Known As

F5 Access Policy Manager
ForgeRock Identity Platform, ForgeRock OpenIDM
 

Overview

 

Sample Customers

City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office
Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University
Find out what your peers are saying about F5 BIG-IP Access Policy Manager (APM) vs. ForgeRock and other solutions. Updated: April 2025.
851,604 professionals have used our research since 2012.