Enterprise CIAM rebrand wave: IBM, CyberArk, Oracle consolidate identity portfolios
Through 2024–2025, three of the four major enterprise heritage CIAM vendors rationalized their identity portfolios under unified brands: IBM Security Verify → IBM Verify, CyberArk Customer Identity → CyberArk Identity, Oracle IDCS → OCI IAM Identity Domains. Together with the ForgeRock+Ping merger and Akamai EoL, the heritage tier compressed materially.
What happened
Three rebrands consolidated the enterprise identity tier in 2024–2025:
- IBM unified its identity portfolio under the IBM Verify brand (formerly IBM Security Verify) in 2025. The "Security" qualifier remains in adjacent products like IBM Security Verify Governance, but the flagship CIAM is now plain "IBM Verify."
- CyberArk had already consolidated its earlier acquisitions (Centrify → Idaptive → Customer Identity) under the unified CyberArk Identity brand by 2024. The longer "Customer Identity" descriptor was dropped.
- Oracle merged the standalone IDCS service into OCI IAM Identity Domains through 2024–2025; existing IDCS tenants migrated, and IDCS auth methods are deprecated in OCI services starting April 11, 2026.
Why it matters
The narrative complement to the ForgeRock + Ping Identity merger (Aug 2023) and the Akamai Identity Cloud End-of-Life (Oct 2024). What was a four-vendor enterprise heritage tier (IBM + Oracle + ForgeRock + Ping, plus Akamai for B2C) is now effectively a three-vendor tier (Ping under Thoma Bravo + IBM Verify + Oracle Identity Domains, plus SAP CDC for B2C-heritage).
For customers, the rebrands were mostly cosmetic, with the underlying products continuing. For greenfield enterprise CIAM evaluation, the more significant signal was what the rebrands implied: the heritage vendors were investing in unified brand surfaces rather than displaced-by-acquisition reorgs. At the time that read as a stability signal rather than a deprecation one.
Update, 18 September 2026: one of the three did not survive
The CyberArk item on this page is no longer a rebrand story. Palo Alto Networks completed its acquisition of CyberArk on 11 February 2026, and the customer identity line was retired rather than carried forward. CyberArk's privileged access, secrets, and machine identity portfolio became the basis of Palo Alto's Idira platform, which covers workforce, machine, and agentic identity and sells no CIAM product. The old product URL, cyberark.com/products/customer-identity, returns a 301 to paloaltonetworks.com/idira.
That takes the enterprise heritage tier down another seat. The vendor profile is now marked deprecated and kept only as a migration record. The IBM Verify and Oracle Identity Domains items on this page are unaffected and remain accurate rebrands.
For the broader landscape framing, see The future of CIAM (Deepak's analysis) and the CIAM vs IAM vs IDaaS guide.