CIAM Platforms

1 Introduction

Consumer Identity and Access Management (CIAM) is a parallel to traditional Identity and Access Management (IAM) that has become a substantial market ...

1.1 Market Segment

The CIAM market is still growing, with many vendors offering mature solutions providing standard and deluxe features to support millions of users acro ...

1.2 Delivery models

In the CIAM market, solutions are offered as SaaS, PaaS, and for on-premise deployment. Pure-play SaaS solutions are often multi-tenant by design. On ...

1.3 Required and Optional Capabilities

Various technologies support all the different requirements customers are facing today. The requirements are

• Deployment options: On-premise, clou ...

2 Leadership

Selecting a vendor of a product or service must not be based only on the information provided in a KuppingerCole Leadership Compass. The Leadership Co ...

ForgeRock, Ping Identity, SAP, and IBM appear at the top of the Overall Leader chart. Each of these vendors are well-established and have excellent re ...

Product Leadership is the first specific category examined below. This view is based on the analysis of their product and/or service features.

Product (or Service) Leadership is where we examine the functional strength and completeness of products and services.

In this iteration of the re ...

Next, we examine innovation in the marketplace. Innovation is, from our perspective, a key capability in all IT market segments. Customers require i ...

The Innovation Leaders are ForgeRock, Ping Identity, IBM, Akamai, SAP, LoginRadius, iWelcome, WSO2, Pirean, Auth0, Cloudentity, and 1Kosmos. The leade ...

Lastly, we analyze Market Leadership. This is an amalgamation of the number of customers, number of managed identities, ratio between customers and ...

For CIAM, Market Leadership is determined by a number of factors, including number of reported customers, managed identities (which may include device ...

3 Correlated View

While the Leadership charts identify leading vendors in certain categories, many customers are looking not only for a product leader, but for a vendor ...

3.1 The Market/Product Matrix

The first of these correlated views contrasts Product Leadership and Market Leadership.

Vendors below the line have a weaker market position than expected according to their product maturity. Vendors above the line are sort of “overperf ...

3.2 The Product/Innovation Matrix

This view shows how Product Leadership and Innovation Leadership are correlated. It is not surprising that there is a pretty good correlation between ...

Vendors below the line are more innovative, vendors above the line are, compared to the current Product Leadership positioning, less innovative.

The ...

3.3 The Innovation/Market Matrix

The third matrix shows how Innovation Leadership and Market Leadership are related. Some vendors might perform well in the market without being Innova ...

In our final comparison chart, we identify the Big Ones in CIAM. In the top right, SAP, ForgeRock, IBM, Ping Identity, Akamai, Auth0, and LoginRadius ...

4 Products and Vendors at a glance

This section provides an overview of the various products/services we have analyzed within this KuppingerCole Leadership Compass on CIAM. This overvie ...

4.1 Ratings at a glance

Based on our evaluation, a comparative overview of the ratings of all the products covered in this document is shown in Table 1.

In addition, we provide in Table 2 an overview which also contains four additional ratings for the vendor, going beyond the product view provided in t ...

5 Product/service evaluation

This section contains a quick rating for every product/service we’ve included in this KuppingerCole Leadership Compass document. For many of the pro ...

5.1 1Kosmos

1Kosmos was founded in 2018 and is headquartered in New Jersey. The company is small but self-funded and profitable. They address the consumer and wor ...

5.2 Akamai

Janrain was launched in 2002 to provide user management and login capabilities for the social media market. Akamai acquired Janrain in early 2019. Aka ...

5.3 Auth0

Bellevue, WA based Auth0 is a rapidly growing CIAM and B2B/B2E IAM solution provider. Founded in 2013, they pioneered API-driven identity services. Au ...

5.4 Cloudentity

Cloudentity was founded in 2017 and is headquartered in Seattle. Cloudentity has a full-featured CIAM and IDaaS solution. Their approach is cloud-firs ...

5.5 CoffeeBean Technology

CoffeeBean Technology was founded in 2008 in the Bay area of California. They focus on increasing ROI via marketing integrations and improving consume ...

5.6 ForgeRock

ForgeRock is a leading venture-backed IAM vendor, headquartered in the US but with many offices around the world. ForgeRock supports most major IAM st ...

5.7 IBM

IBM has renamed and branded their CIAM and IDaaS solution to Security Verify from Cloud Identity. It can be used for B2B and B2C use cases. The SaaS v ...

5.8 iWelcome

iWelcome, founded in 2011, is a VC-backed IDaaS vendor based in the Netherlands. The CIAM functionality is a core feature of their overall IDaaS progr ...

5.9 LoginRadius

Founded in 2011, LoginRadius is a VC-backed CIAM vendor based in Vancouver, BC. The company provides CIAM as SaaS via a multi-cloud/region deployment ...

5.10 Microsoft

Microsoft Azure Active Directory External Identities is a cloud-based identity and access management service with integrated security to manage and pr ...

5.11 NRI Secure Technologies

NRI Secure Technologies was founded in 2000 as a subsidiary of Nomura Research Institute. NRI Secure also provides security consulting. Uni-ID Libra i ...

5.12 Oxyliom Solutions

Oxyliom Solutions was founded in 2012. They are headquartered in Luxembourg and also have offices in Casablanca and Dubai. In addition to CIAM service ...

5.13 Ping Identity

Ping Identity has been a pioneer in identity federation and access management since its founding in 2002. Ping Identity has grown substantially and we ...

5.14 Pirean

Pirean was founded in 2002 with offices in London and Sydney. In 2018, Pirean was acquired by Exostar, an IAM and collaboration solutions provider for ...

5.15 ReachFive

ReachFive is a small, venture-backed CIAM company that was founded in 2014 in France. CIAM is their sole focus. Their solution is SaaS only, running i ...

5.16 SAP

Gigya was a leading CIAM solution and was acquired by SAP in 2017. SAP have integrated the former Gigya into their own suite of solutions and expanded ...

5.17 Synacor

Synacor was founded in Buffalo, NY in 1998. They offer email and cloud hosting/services in addition to their Cloud ID service. Cloud ID’s main focus ...

5.18 Ubisecure

Ubisecure was founded in 2002 in Finland. Ubisecure is a full-service CIAM and IDaaS provider with additional services. Their Identity Platform can be ...

5.19 WSO2

WSO2 was founded in 2005. They are an open source IAM/CIAM solution provider. Their target market is identity architects and developers who can take a ...

6 Vendors and Market Segments to watch

Aside from the vendors covered in detail in this Leadership Compass document, we also observe other vendors in the market that we find interesting. So ...

6.1 Amazon Cognito

Amazon offers some CIAM functionality with Cognito. Cognito supports OAuth, OIDC, and SAML for federation, allowing users to sign in using social medi ...

6.2 Avatier

California-based Avatier is an enterprise IAM vendor that supports some CIAM use cases. Their focus is on rapid deployment of basic IAM services to cu ...

6.3 AvocoSecure Trust Platform

AvocoSecure is a privately-owned UK company offering Cloud and CIAM services. The Avoco Trust Platform API is a toolkit providing extended ecosystem f ...

6.4 cidaas

Widas ID was founded in Germany in 1997. They do custom development for Big Data and IoT applications as well as consulting for many large organizatio ...

6.5 Fusion Auth

FusionAuth is single-tenant CIAM solution that can be deployed on-premises or in a private cloud. Its self-hosted option is free for unlimited users a ...

6.6 Genetsis Group Dru-ID

Dru-ID is the CIAM offering from Genetsis Group, which is headquartered in Madrid. Their product, Drui-ID, is focused on identity relationship managem ...

6.7 Google Firebase

Firebase is a mobile app development platform that has a few CIAM features. Firebase allows app developers to manage users and groups, store user data ...

6.8 Login Alliance Syntlogo Login Master

Login Alliance Syntlogo was founded in 2001 near Stuttgart. They have leveraged their experience in IAM consulting to create Login Master (CIAM) and S ...

6.9 Miracl

Miracl is a London-based startup focused on strong but user-friendly MFA. Their solution is passwordless (but does require a PIN, however it is not st ...

6.10 Okta

San Francisco-based Okta is a leading IDaaS provider. Okta accepts Authy, DeepNet, Duo, Google, LastPass, Microsoft, their own Okta app, OneSpan Mobile ES, and SafeNet app authenticators; Android and iOS biometrics; and FIDO U2F/2.0 authenticators. Okta has a mobile SDK that can collect some device intel parameters Additional advanced device intel gathering features are planned for future releases. Account takeover protection is built-in and enhanced by connectors to bot management, ID proofing, and fraud risk intel feeds. Protocol support includes JWT, Kerberos, OAuth, OIDC, RADIUS, SAML, and WS-Fed.

Users can self-register or be bulk provisioned in via LDAP and SCIM. Progressive profiling is supported. All normal account recovery methods are present. Okta supports REST API with versioning, Webhook, and WebAuthn interfaces and JSON format. OOTB connectors are available for more than 6,500 applications. Okta Universal Directory allows for flexible consumer profile storage. Okta supports per-attribute and per-app consent grant collection, and their Expression Language allows rules-based data normalization or transformation for downstream applications.

Why worth watching: Okta has a strong and feature-rich IDaaS solution which also serves CIAM use cases.

6.11 Onegini

Netherlands-based Onegini supports a plethora of account types for initial registration, including: OpenID, Facebook, Google, Twitter, LinkedIn, Amazo ...

6.12 Privo ID

Privo offers a family consent-oriented consumer identity management solution. Privo, headquartered in the US, has focused on providing fine-grained pa ...

6.13 Signicat Digital Identity Platform

Signicat, a leading regional IDP and e-signature service provider, was founded in 2006 in Norway. In 2019, they were acquired by Nordic Capital; Signi ...

7 Related Research

Advisory Note: Identity & Access Management/Governance Blueprint - 70839
Advisory Note: Secure your Cloud against Industrial Espionage - 70997
Buyer’s Compass: Consumer Identity and Access Management Solutions - 80111
Executive View: Auth0 Platform - 80329
Executive View: iWelcome IDaaS and CIAM - 80328
Executive View: NRI Secure Technologies: Uni-ID Libra 2.4 - 80161
Executive View: Onegini Connect - 80168
Executive View: Pirean Consumer IAM Platform - 70223
Executive View: Salesforce Identity - 70813
Executive View: Ubisecure Identity Platform - 79072
Leadership Brief: 5 Steps to Consumer Identity and Access Management - 72549
Leadership Compass: CIAM Platforms - 79059
Leadership Compass: Consumer Authentication – 80061
Leadership Compass: Identity API Platforms - 79012
Whitepaper: ForgeRock Identity Platform Capabilities for Authentication - 79080
Whitepaper: Ping Identity Solutions for Customer Identity and Access Management - 70289