Content of Figures
- Figure 1 The Overall Leadership rating for the CIAM market segment
- Figure 2 Product Leaders in the CIAM market segment
- Figure 3 Innovation Leaders in the CIAM market segment
- Figure 4 Market Leaders in the CIAM market segment
- Figure 5 The Market/Product Matrix.
- Figure 6 The Product/Innovation Matrix.
- Figure 7 The Innovation/Market Matrix
Consumer Identity and Access Management (CIAM) is a parallel to traditional Identity and Access Management (IAM) that has become a substantial market ...Login Get full Access
1.1 Market Segment
The CIAM market is still growing, with many vendors offering mature solutions providing standard and deluxe features to support millions of users acro ...Login Get full Access
1.2 Delivery models
In the CIAM market, solutions are offered as SaaS, PaaS, and for on-premise deployment. Pure-play SaaS solutions are often multi-tenant by design. On ...Login Get full Access
1.3 Required and Optional Capabilities
Various technologies support all the different requirements customers are facing today. The requirements are
- Deployment options: On-premise, clou ...
Selecting a vendor of a product or service must not be based only on the information provided in a KuppingerCole Leadership Compass. The Leadership Co ...
ForgeRock, Ping Identity, SAP, and IBM appear at the top of the Overall Leader chart. Each of these vendors are well-established and have excellent re ...Login Get full Access
Product Leadership is the first specific category examined below. This view is based on the analysis of their product and/or service features.
Product (or Service) Leadership is where we examine the functional strength and completeness of products and services.
In this iteration of the re ...Login Get full Access
Next, we examine innovation in the marketplace. Innovation is, from our perspective, a key capability in all IT market segments. Customers require i ...
The Innovation Leaders are ForgeRock, Ping Identity, IBM, Akamai, SAP, LoginRadius, iWelcome, WSO2, Pirean, Auth0, Cloudentity, and 1Kosmos. The leade ...Login Get full Access
Lastly, we analyze Market Leadership. This is an amalgamation of the number of customers, number of managed identities, ratio between customers and ...
For CIAM, Market Leadership is determined by a number of factors, including number of reported customers, managed identities (which may include device ...Login Get full Access
3 Correlated View
While the Leadership charts identify leading vendors in certain categories, many customers are looking not only for a product leader, but for a vendor ...Login Get full Access
3.1 The Market/Product Matrix
The first of these correlated views contrasts Product Leadership and Market Leadership.
Vendors below the line have a weaker market position than expected according to their product maturity. Vendors above the line are sort of “overperf ...Login Get full Access
3.2 The Product/Innovation Matrix
This view shows how Product Leadership and Innovation Leadership are correlated. It is not surprising that there is a pretty good correlation between ...
Vendors below the line are more innovative, vendors above the line are, compared to the current Product Leadership positioning, less innovative.
The ...Login Get full Access
3.3 The Innovation/Market Matrix
The third matrix shows how Innovation Leadership and Market Leadership are related. Some vendors might perform well in the market without being Innova ...
In our final comparison chart, we identify the Big Ones in CIAM. In the top right, SAP, ForgeRock, IBM, Ping Identity, Akamai, Auth0, and LoginRadius ...Login Get full Access
4 Products and Vendors at a glance
This section provides an overview of the various products/services we have analyzed within this KuppingerCole Leadership Compass on CIAM. This overvie ...Login Get full Access
4.1 Ratings at a glance
Based on our evaluation, a comparative overview of the ratings of all the products covered in this document is shown in Table 1.Login Get full Access
In addition, we provide in Table 2 an overview which also contains four additional ratings for the vendor, going beyond the product view provided in t ...Login Get full Access
5 Product/service evaluation
This section contains a quick rating for every product/service we’ve included in this KuppingerCole Leadership Compass document. For many of the pro ...Login Get full Access
1Kosmos was founded in 2018 and is headquartered in New Jersey. The company is small but self-funded and profitable. They address the consumer and wor ...Login Get full Access
Janrain was launched in 2002 to provide user management and login capabilities for the social media market. Akamai acquired Janrain in early 2019. Aka ...Login Get full Access
Bellevue, WA based Auth0 is a rapidly growing CIAM and B2B/B2E IAM solution provider. Founded in 2013, they pioneered API-driven identity services. Au ...Login Get full Access
Cloudentity was founded in 2017 and is headquartered in Seattle. Cloudentity has a full-featured CIAM and IDaaS solution. Their approach is cloud-firs ...Login Get full Access
5.5 CoffeeBean Technology
CoffeeBean Technology was founded in 2008 in the Bay area of California. They focus on increasing ROI via marketing integrations and improving consume ...Login Get full Access
ForgeRock is a leading venture-backed IAM vendor, headquartered in the US but with many offices around the world. ForgeRock supports most major IAM st ...Login Get full Access
IBM has renamed and branded their CIAM and IDaaS solution to Security Verify from Cloud Identity. It can be used for B2B and B2C use cases. The SaaS v ...Login Get full Access
iWelcome, founded in 2011, is a VC-backed IDaaS vendor based in the Netherlands. The CIAM functionality is a core feature of their overall IDaaS progr ...Login Get full Access
Founded in 2011, LoginRadius is a VC-backed CIAM vendor based in Vancouver, BC. The company provides CIAM as SaaS via a multi-cloud/region deployment ...Login Get full Access
Microsoft Azure Active Directory External Identities is a cloud-based identity and access management service with integrated security to manage and pr ...Login Get full Access
5.11 NRI Secure Technologies
NRI Secure Technologies was founded in 2000 as a subsidiary of Nomura Research Institute. NRI Secure also provides security consulting. Uni-ID Libra i ...Login Get full Access
5.12 Oxyliom Solutions
Oxyliom Solutions was founded in 2012. They are headquartered in Luxembourg and also have offices in Casablanca and Dubai. In addition to CIAM service ...Login Get full Access
5.13 Ping Identity
Ping Identity has been a pioneer in identity federation and access management since its founding in 2002. Ping Identity has grown substantially and we ...Login Get full Access
Pirean was founded in 2002 with offices in London and Sydney. In 2018, Pirean was acquired by Exostar, an IAM and collaboration solutions provider for ...Login Get full Access
ReachFive is a small, venture-backed CIAM company that was founded in 2014 in France. CIAM is their sole focus. Their solution is SaaS only, running i ...Login Get full Access
Gigya was a leading CIAM solution and was acquired by SAP in 2017. SAP have integrated the former Gigya into their own suite of solutions and expanded ...Login Get full Access
Synacor was founded in Buffalo, NY in 1998. They offer email and cloud hosting/services in addition to their Cloud ID service. Cloud ID’s main focus ...Login Get full Access
Ubisecure was founded in 2002 in Finland. Ubisecure is a full-service CIAM and IDaaS provider with additional services. Their Identity Platform can be ...Login Get full Access
WSO2 was founded in 2005. They are an open source IAM/CIAM solution provider. Their target market is identity architects and developers who can take a ...Login Get full Access
6 Vendors and Market Segments to watch
Aside from the vendors covered in detail in this Leadership Compass document, we also observe other vendors in the market that we find interesting. So ...Login Get full Access
6.1 Amazon Cognito
Amazon offers some CIAM functionality with Cognito. Cognito supports OAuth, OIDC, and SAML for federation, allowing users to sign in using social medi ...Login Get full Access
California-based Avatier is an enterprise IAM vendor that supports some CIAM use cases. Their focus is on rapid deployment of basic IAM services to cu ...Login Get full Access
6.3 AvocoSecure Trust Platform
AvocoSecure is a privately-owned UK company offering Cloud and CIAM services. The Avoco Trust Platform API is a toolkit providing extended ecosystem f ...Login Get full Access
Widas ID was founded in Germany in 1997. They do custom development for Big Data and IoT applications as well as consulting for many large organizatio ...Login Get full Access
6.5 Fusion Auth
FusionAuth is single-tenant CIAM solution that can be deployed on-premises or in a private cloud. Its self-hosted option is free for unlimited users a ...Login Get full Access
6.6 Genetsis Group Dru-ID
Dru-ID is the CIAM offering from Genetsis Group, which is headquartered in Madrid. Their product, Drui-ID, is focused on identity relationship managem ...Login Get full Access
6.7 Google Firebase
Firebase is a mobile app development platform that has a few CIAM features. Firebase allows app developers to manage users and groups, store user data ...Login Get full Access
6.8 Login Alliance Syntlogo Login Master
Login Alliance Syntlogo was founded in 2001 near Stuttgart. They have leveraged their experience in IAM consulting to create Login Master (CIAM) and S ...Login Get full Access
Miracl is a London-based startup focused on strong but user-friendly MFA. Their solution is passwordless (but does require a PIN, however it is not st ...Login Get full Access
San Francisco-based Okta is a leading IDaaS provider. Okta accepts Authy, DeepNet, Duo, Google, LastPass, Microsoft, their own Okta app, OneSpan Mobile ES, and SafeNet app authenticators; Android and iOS biometrics; and FIDO U2F/2.0 authenticators. Okta has a mobile SDK that can collect some device intel parameters Additional advanced device intel gathering features are planned for future releases. Account takeover protection is built-in and enhanced by connectors to bot management, ID proofing, and fraud risk intel feeds. Protocol support includes JWT, Kerberos, OAuth, OIDC, RADIUS, SAML, and WS-Fed.
Users can self-register or be bulk provisioned in via LDAP and SCIM. Progressive profiling is supported. All normal account recovery methods are present. Okta supports REST API with versioning, Webhook, and WebAuthn interfaces and JSON format. OOTB connectors are available for more than 6,500 applications. Okta Universal Directory allows for flexible consumer profile storage. Okta supports per-attribute and per-app consent grant collection, and their Expression Language allows rules-based data normalization or transformation for downstream applications.
Why worth watching: Okta has a strong and feature-rich IDaaS solution which also serves CIAM use cases.
Netherlands-based Onegini supports a plethora of account types for initial registration, including: OpenID, Facebook, Google, Twitter, LinkedIn, Amazo ...Login Get full Access
6.12 Privo ID
Privo offers a family consent-oriented consumer identity management solution. Privo, headquartered in the US, has focused on providing fine-grained pa ...Login Get full Access
6.13 Signicat Digital Identity Platform
Signicat, a leading regional IDP and e-signature service provider, was founded in 2006 in Norway. In 2019, they were acquired by Nordic Capital; Signi ...Login Get full Access
7 Related Research
Advisory Note: Identity & Access Management/Governance Blueprint - 70839
Advisory Note: Secure your Cloud against Industrial Espionage - 70997
Buyer’s Compass: Consumer Identity and Access Management Solutions - 80111
Executive View: Auth0 Platform - 80329
Executive View: iWelcome IDaaS and CIAM - 80328
Executive View: NRI Secure Technologies: Uni-ID Libra 2.4 - 80161
Executive View: Onegini Connect - 80168
Executive View: Pirean Consumer IAM Platform - 70223
Executive View: Salesforce Identity - 70813
Executive View: Ubisecure Identity Platform - 79072
Leadership Brief: 5 Steps to Consumer Identity and Access Management - 72549
Leadership Compass: CIAM Platforms - 79059
Leadership Compass: Consumer Authentication – 80061
Leadership Compass: Identity API Platforms - 79012
Whitepaper: ForgeRock Identity Platform Capabilities for Authentication - 79080
Whitepaper: Ping Identity Solutions for Customer Identity and Access Management - 70289