Short Summary
Consumer Identity and Access Management (CIAM) is a fast-growing specialization of IAM built for consumer- and citizen-facing scenarios where digital experience, privacy, and scale matter more than traditional employee IAM. CIAM systems provision, authenticate, and authorize consumers while collecting identity data from many sources, enabling easier onboarding through mobile and social channels. CIAM further diverges from enterprise IAM by adding behavioral analytics, consent management, and integrations with CRM, marketing automation, and connected devices, creating opportunities to use rich customer data for marketing analysis while also raising challenges around massive identity volumes and regulatory compliance (e.g., GDPR, PSD2) and anti-fraud requirements.
NRI SecureTechnologies’ Uni-ID Libra is a Japanese CIAM product supporting B2C and B2B, originating in 2008 and relaunched under the Libra brand in 2017. The company claims over 20 large Japanese customers and more than 100 million consumer identities served. Uni-ID Libra v2.6 provides identity management with an extensible JSON schema, SCIM 2.0 and REST APIs, progressive profiling, centralized consent with history and revocation, and consumer self-service for registrations, consents, and terms. It supports data rights such as portability and deletion (“right to be forgotten”), with some restrictions requiring administrative flags. Data is encrypted using MySQL TDE and operations are logged.
Authentication includes OTP via SMS/authenticator apps/hardware tokens, backup codes, and passwordless options via FIDO (UAF/U2F/FIDO2/WebAuthn) and email “magic link.” Risk-adaptive authentication uses a risk engine and step-up MFA, leveraging device, IP, geolocation, behavior, and threat intelligence. Authorization/federation supports OAuth 2.0, OIDC (including CIBA), SAML 2.0, JWT, ABAC, token introspection/revocation, device grant for IoT, and configurable social login connectors. Deployment is modular, microservices-based, supports on-prem, hosted single-tenant, or SaaS, and runs with Docker/Kubernetes and major public cloud container platforms, though multi-tenant SaaS is not planned. Strengths include standards support and scalable deployments; challenges include limited presence outside Japan, no mobile SDK, and gaps in out-of-the-box fraud intelligence integrations.
