NRI SecureTechnologies: Uni-ID Libra 2.4

Short Summary

Consumer Identity and Access Management (CIAM) has become the fastest-growing segment of Identity and Access Management because organizations increasingly need to serve external customers, not just employees, while delivering a smoother digital experience across mobile and social channels. CIAM systems provision, authenticate, authorize, and store consumer identities gathered from many sources, enabling easier onboarding and richer interactions. However, organizations face challenges at CIAM scale: consumer identities can be orders of magnitude larger than employee populations, and implementations must address privacy compliance (e.g., GDPR, PSD2) alongside anti-fraud demands. At the same time, CIAM creates an opportunity to leverage customer identity data for marketing analytics and personalization through progressive profiling.

NRI SecureTechnologies’ Uni-ID Libra (version 2.4 sub-release) is a CIAM platform focused primarily on Japan, with large deployments across automotive, financial, retail, media, and telecom sectors. The platform is modular, combining Identity Management, Authentication, Authorization/Federation, and a Risk Engine, accessible via a management console plus REST/JSON APIs and SCIM 2.0. Identity Management includes an encrypted identity repository, extensible JSON-based schema, consent history, logging, self-registration, and a consumer-facing consent portal with privacy-by-default toggles, revocation, versioned terms, portability, deletion (“right to be forgotten”), and processing restriction (with some admin involvement).

Authentication supports OTP via SMS, authenticator apps, hardware tokens, backup factors, passwordless options (including email “magic link”), and full FIDO coverage (UAF, U2F, FIDO2/WebAuthn), with risk-adaptive step-up using behavioral and threat-intelligence signals. Federation supports OIDC/OAuth 2.0, SAML 2.0, JWT, social logins (including Sign in with Apple), and IoT use cases via OAuth 2.0 Device Authorization Grant. Deployment is flexible (software, SaaS, single-tenant hosted), microservices-based (Spring Boot), container-ready (Docker/Kubernetes), and supports on-prem and major public-cloud container platforms. Key challenges include limited presence outside Japan, missing mobile SDK, and gaps in exporting/analyzing marketing data and external threat-intelligence integration (planned).

Interesting Facts

• Uni-ID Libra was first developed in 2008 and rebranded and relaunched as Uni-ID Libra in mid-2017.
• NRI SecureTechnologies became a subsidiary of Nomura Research Institute in 2000.
• Nat Sakimura is an author of the OpenID Connect specification and serves on the OpenID Foundation board of directors.
• NRI Secure was the first Japanese company to obtain an OpenID Connect Certification.
• Uni-ID Libra serves over 100 million consumer identities for 20-plus large Japanese customers.
• Uni-ID Libra maintains a single extensible user schema for JSON-based attribute management.
• SCIM 2.0 is supported for importing and exporting user data via the SCIM API.
• Uni-ID Libra version 2.4 includes support for OpenID Connect CIBA.
• As of version 2.4, Uni-ID Libra fully supports Docker containers and Kubernetes.
• Uni-ID Libra can be deployed as software, SaaS with 24/7/365 support, or as a single-tenant hosted service.

Notable Quotes

• “Consumer Identity and Access Management (CIAM) has become the fastest-growing specialty within Identity and Access Management.”
• “Consumer IAM systems provision, authenticate, authorize, collect and store identity and other information about consumers from many and sometimes unauthoritative sources.”
• “Improved user experience is often manifested through consumer's mobile devices or social networks and providing an easier onboarding experience for consumers.”
• “Customer identities may be orders of magnitude more numerous than the employee identities enterprises have been managing.”
• “Many enterprises plan to use the stream of rich customer data collected in these systems for marketing analyses.”
• “Progressive user profiling is a characteristic of CIAM in which information about a customer is incrementally collected as the customer interacts with a business's website.”
• “A centralized user interface provides simple toggle switches for each consent option, which are initially set off for privacy by default.”
• “Risk adaptive authentication is available by leveraging the Uni-ID Libra risk engine integrated with step-up authentication.”
• “The Risk Engine leverages threat intelligence from within NRI Secure's managed security services network as well as the client's consumer activity logs.”
• “Uni-ID Libra is deployed as multiple microservices using Spring Boot with a GUI-driven installation and configuration based on Ansible.”