Enterprise CIAM rebrand wave: IBM, CyberArk, Oracle consolidate identity portfolios
Through 2024–2025, three of the four major enterprise heritage CIAM vendors rationalized their identity portfolios under unified brands: IBM Security Verify → IBM Verify, CyberArk Customer Identity → CyberArk Identity, Oracle IDCS → OCI IAM Identity Domains. Together with the ForgeRock+Ping merger and Akamai EoL, the heritage tier compressed materially.
What happened
Three rebrands consolidated the enterprise identity tier in 2024–2025:
- IBM unified its identity portfolio under the IBM Verify brand (formerly IBM Security Verify) in 2025. The "Security" qualifier remains in adjacent products like IBM Security Verify Governance, but the flagship CIAM is now plain "IBM Verify."
- CyberArk had already consolidated its earlier acquisitions (Centrify → Idaptive → Customer Identity) under the unified CyberArk Identity brand by 2024. The longer "Customer Identity" descriptor was dropped.
- Oracle merged the standalone IDCS service into OCI IAM Identity Domains through 2024–2025; existing IDCS tenants migrated, and IDCS auth methods are deprecated in OCI services starting April 11, 2026.
Why it matters
The narrative complement to the ForgeRock + Ping Identity merger (Aug 2023) and the Akamai Identity Cloud End-of-Life (Oct 2024). What was a four-vendor enterprise heritage tier (IBM + Oracle + ForgeRock + Ping, plus Akamai for B2C) is now effectively a three-vendor tier (Ping under Thoma Bravo + IBM Verify + Oracle Identity Domains, plus SAP CDC for B2C-heritage).
For customers, the rebrands are mostly cosmetic, the underlying products continue. For greenfield enterprise CIAM evaluation, the more significant signal is what the rebrands imply: the heritage vendors are investing in unified brand surfaces rather than displaced-by-acquisition reorgs. That's a stability signal, not a deprecation one.
For the broader landscape framing, see The future of CIAM (Deepak's analysis) and the CIAM vs IAM vs IDaaS guide.