PingFederate is used as the front-end for staff and students. It provides SSO to GoogelApps and on-premise apps. It's robust and quick to deploy,
Note: it is not a direct competitor to Okta - the PingOne offering is.
- Admin GUI
- wide number of connectors
- support of standards (LDAP, SCIM, SAML)
- for any installation over multiple servers it needs a log aggregation tool such as Splunk.