CIAM
All topics →Customer identity and access management in depth: architecture, build-versus-buy, vendor selection, and the login, onboarding, and security tradeoffs behind it.
122 stories, newest first.
Featured
The identity market consolidated in 2026, from Palo Alto Networks closing CyberArk to four NHI startups changing hands in ten weeks. The Identity Map sorts 255 vendors into 14 branches so buyers pick the right category before they pick a vendor.
Read the article
Your account is only as secure as its weakest reachable path, and that path is usually recovery. A ranked guide to recovery methods, the NIST-backed design rules, and the help desk vector behind MGM, TfL and M&S.
Vendor log retention ends months before the average breach is discovered. The funnel, security, and silent-failure metrics every CIAM deployment should have, and the seven-panel dashboard to start with.
WebAuthn Level 3 was proposed for W3C Recommendation in July 2026. Encryption key derivation, cross-domain credentials, and automatic list syncing are now first-class. Here is what changed.
Everyone argues about auth pricing. Almost nobody accounts for what identity actually costs per closed deal, or notices the invoice founders obsess over is the smallest of four identity costs.
Passkeys demo better than any login method ever shipped. Most deployments still cannot get anyone to turn them on. Both numbers are true.
Your identity stack was architected for humans with browsers and thumbs. Agent traffic breaks consent, delegation, sessions, bot defence and audit at once.
Every CTO re-litigates build vs buy for authentication every 18 months, and the framing is broken. The real question isn't build or buy. It's which parts of identity are commodity and which parts are your actual product.
Identity vendors rarely die of bankruptcy. They die of acquisition, then neglect, then a shutdown email. A complete history of every dead CIAM vendor, the pattern behind the deaths, and the questions that protect you from the next one.
Whether Auth0 is too expensive depends entirely on who's asking. A framework for telling the regulated enterprise buyer (pay and negotiate) apart from the high-volume, cost-sensitive platform (migrate), with 2026 pricing and breach-cost data.
Scaling a CIAM platform past a billion users taught me that customer identity is a trust problem: progressive profiling, risk-based auth, and passwordless done right.
Okta and Microsoft no longer define the CIAM market alone. Five developer-first, passwordless-native, and AI-ready platforms are growing fast by solving the specific problems the incumbents leave unaddressed. Here is where each one fits in 2026.
Auth0 (Okta) versus ForgeRock (Ping Identity), compared on developer experience, CIAM versus workforce IAM, deployment models, extensibility, standards, and pricing.
Most CIAM selection decisions get made on features at evaluation time. Six-figure migration projects 18 months later are the result. Here's the stage-fit framework that prevents it.
An annual research piece based on 12 months of monitoring 200+ CIAM vendor changelogs. The 14 trends shaping customer identity in 2026 and the vendors leading each shift.
The five CIAM contenders in 2026 don't compete head-on. Each wins for a different stage and buyer. Here's the framework I use, with the honest tradeoffs each carries.
A founder's guide to the difference between authentication and authorization in 2026, with passkeys, agent auth, JWT pitfalls, and the mistakes I see at scale.
Security buyers research vendors in AI tools before a sales rep ever hears from them. The way a CISO interrogates ChatGPT looks nothing like how a marketer does. Here is what GEO actually looks like for cybersecurity.
We cancelled Auth0 over a year ago. Not because it stopped working, but because scaling to 350,000 monthly active users made the pricing model untenable.
The CIAM platform that got you to 1 million users won't get you to 10 million AI agents.
Silent Network Authentication verifies users in 1-4 seconds using SIM cryptography without any user action.
Passwords are responsible for 80% of data breaches. Passwordless authentication eliminates the attack surface entirely.
March 2026 marks passwordless tipping point: Microsoft forces passkey migration, regulatory deadlines hit, and adoption surges to 69% of consumers.
CIAM is the system that registers, authenticates, and protects your customers. How it differs from IAM, what it includes, and when to buy one.
60% of phishing breaches now bypass traditional MFA. Learn how AI-powered adaptive authentication and behavioral biometrics create continuous security
The decentralized identity market hits $7.4B in 2026. Every EU member state must deploy a digital identity wallet by year-end.
87% of enterprises are deploying passkeys. This complete playbook covers architecture decisions, enrollment UX, recovery design, and the deployment
AT&T's $177M settlement covers 73M customers, but the real story is how breach data from 2019 just resurfaced in 2026 with fully decrypted SSNs. Here's why.
TikTok's new U.S. ownership brought privacy changes that sparked mass deletions. Here's what actually changed and what it means for your data.
IAM is one of cybersecurity's most in-demand, and least understood, career paths. If you're a young engineer wondering where to start, this is the
Production authentication patterns for OAuth 2.0, OIDC, JWT, SAML, and WebAuthn, including the build-versus-buy maths and the storage and session decisions that are expensive to reverse later.
Authentication requirements block 75-80% of enterprise deals, costing B2B SaaS companies millions annually.
The scoring sheet for a CIAM evaluation: 25 capabilities to test every vendor against, weighted by business type, verified for 2026.
Firebase Auth has no real B2B Organizations and prices enterprise SAML free only to 50 MAU. Eight alternatives compared on verified September 2026 pricing.
Cognito's free tier shrank and its hosted UI still fights you. Eight alternatives compared on verified September 2026 pricing, plus the SRP migration trap.
WorkOS bills connections, not users, and that is the whole question. Eight B2B identity alternatives compared on verified September 2026 pricing.
Fourteen Auth0 alternatives compared on verified September 2026 pricing: Clerk, WorkOS, SSOJet, Stytch, Descope, Keycloak, FusionAuth, Cognito and more.
Twilio acquiring Stytch signals a major shift in developer CIAM. I've analyzed 20+ platforms, from Descope to Keyclock, to show you which deliver on
Ten passwordless CIAM platforms compared on verified September 2026 pricing and real passkey depth, plus three vendors to drop from an older shortlist.
The definitive 2026 CIAM ranking: ten platforms compared on pricing, enterprise fit, and agent identity, plus the right pick for each job.
Akamai Identity Cloud shuts down Dec 2027, but the real deadline is March 2026. Over 1,000 enterprises face forced migration as social login breaks.
Which IAM platform fits your organization? 21 workforce platforms compared with verified 2026 pricing, the year's acquisitions, and newer entrants to watch.
🚨 ShinyHunters compromised Google, Qantas & dozens more using OAuth device flow attacks, bypassing MFA without exploiting a single software bug.
This deal represents the maturation of the identity market. The days of pure-play identity vendors competing primarily on features are ending.
Confused by the growing identity management landscape? This comprehensive guide breaks down every IAM category, from traditional workforce identity to
The complete CIAM provider directory, not a ranking: 34 identity platforms across six categories, with current ownership, published free tiers, and fit.
Comprehensive Customer Identity and Access Management (CIAM) strategy guide for enterprise decision makers.
In a world where credential breaches cost companies millions, strong authentication isn't optional, it's essential.
Struggling with proprietary identity solutions? This comprehensive guide explores how open source CIAM platforms offer enterprises transparency,
Streamline access, reduce risks, and strengthen control with Enterprise SSO and Federated Identity.
Passkeys use public-key cryptography, so there is no shared secret for a breach to leak or a phishing page to capture. Passwords are still everywhere. Here is where each one belongs in 2026.
Master enterprise CIAM performance optimization with comprehensive guide. Discover proven strategies for scaling authentication to handle millions of
Discover comprehensive security best practices for CIAM systems, including detailed implementation templates for authentication, fraud prevention,
Discover a comprehensive guide to implementing CIAM across five critical components: core configuration, security, privacy, API security, and monitoring.
Businesses face mounting cyber threats and data breaches from third-party vendors. Open-source CIAM solutions offer a secure, transparent alternative for
Explore the technical realities of passwordless authentication in this comprehensive analysis.
Identity and Access Management (IAM) is vital for organizations to safeguard their digital assets.
The shift towards AI-powered IAM promises to enhance security, improve user experiences, and simplify complex access management tasks.
Machines against machines, AI promises the future’s most decisive counterpunch against surging account takeover threats.
Discover the future of secure and innovative authentication with WebAuthn. Say goodbye to passwords and hello to passwordless auth and passkeys.
In the fast-paced world of the internet, where every click, every search, and every interaction leaves a digital footprint, the security of human
Secure your online accounts with out-of-band authentication. Learn more about cyber security and how it can protect your information.
Cybersecurity is a continuous journey, but with solid authentication systems, this trip can be safer for everyone on board.
OAuth 2 allows users to grant third-party applications access to their accounts without sharing their passwords.
Looking for a comprehensive guide to mobile authentication? Look no further than our Developer's Guide!
What I learned about product management while building LoginRadius into a CIAM platform serving over a billion identities.
With the e-commerce market experiencing a surge in demand over the past couple of years, specific security threats that require adequate attention have
IAM systems that are backed by AI offer several benefits in three major aspects: authentication, identity management and secure access
BYOI, or Bring Your Own Identity, is an increasingly popular concept in identity and access management
CIAM becomes prominent and requires cross-functional collaboration and deliberate decision-making
Though zero trust architecture may be potent for reinforcing overall security, chances of sneaking and security breaches aren’t always zero.
Authentication, identity verification, and identification answer three different security questions. Confusing them is how products end up with weak controls.
Out-of-band authentication adds a second communication channel to verify the user. Here is how it works and where it earns its keep.
Traditional IAM was built for employees, not customers. Here are five signs your IAM cannot do the CIAM job and what to fix.
Whether we talk about inappropriate data collection or a loophole in managing consumer identities, anything could lead to compromised sensitive
Machine identities now vastly outnumber human ones in most companies, and they are poorly governed. Here is the risk and the fix.
Businesses have to be extra vigilant in safeguarding customer data. Minor mistakes can cause a massive data breach, violating data privacy regulations and
What does it mean if everyone’s an identity driven company? Before answering that question, let’s define what it means to be an identity-driven company.
One identity behind the scenes, full brand expression in front of it, and consent scoped per brand. The architecture that survives an audit.
Credential stuffing exploits password reuse at industrial scale. Here is how it works and the layered defences that actually stop it.
Identity as a Service is the cloud-delivered form of IAM. What IDaaS includes, why companies pick it, and how to evaluate the major platforms.
How your business can get the most out of AI and IoT while protecting your customers, employees, and other end-users.
Corporate account takeover attacks let criminals impersonate employees, drain accounts, and pivot inward. Here is how to detect and stop them.
Identity Governance and Administration is the policy and audit layer on top of IAM. Why every mid-sized organization now needs it and what to evaluate.
Many users switch websites when they are bombarded with lengthy registration forms too early. The solution to this is lazy registration
Account sharing on streaming platforms is now a revenue and security problem. Concurrent-session limits are a key part of the answer.
Enterprises need to use methods to maximize the use of digital identities for multiple users.
Over the years, social engineering attacks have been a regular phenomenon against companies. It has actually become more and more sophisticated.
Digital transformation has become the need of the hour for every consumer-focused business today
Retail identity is uniquely hard: high volume, low margin, omnichannel, and fraud-heavy. Here are the challenges and how to address them.
The Internet of Things (IoT) is creating an exciting new world of new and improved experiences for all.
Login is a big deal that decides the entire UX your website is going to deliver. Businesses should try to put as little resistance as possible into their
API-first CIAM unlocks the speed digital businesses need without locking them into one vendor's UI. Here is why it matters.
Cloud identity management decides who can reach which resource, when, and how. A practical look at IAM and CIAM in the cloud era.
IAM is the discipline of giving the right people the right access and proving it after the fact. Concepts, controls, and how to design a modern program.
Identity proofing is how you verify a person is who they claim to be at sign-up. Here is why it matters and how it works end to end.
In reality, there are so many mistakes that can make your account vulnerable to cyber attacks.
Security problems are an alternative way to recognise your customers when they have forgotten their password, entered too many times the wrong passwords,
How I built LoginRadius into an IDaaS platform that handles hybrid environments, SSO, MFA, and compliance at scale.
Single-page apps changed how auth works. Here is how we approached SPA security at LoginRadius and the patterns worth keeping.
Mobile auth is harder than web auth. Here is how we approached enterprise mobile security at LoginRadius and what every team should ship.
Smart cities promise efficiency and convenience, but their backbone is identity, data, and trust. Here is what will make them work.
Why we shipped a consumer-level audit trail at LoginRadius and what it changed for enterprise risk and compliance teams.
Online gambling is a top target for fraud, ATO, and money laundering. Here is what operators must lock down to keep players and revenue safe.
> App developers are increasingly turning to customer identity and access management (CIAM) solutions as B2C companies look to offer an elevated user
Designing a CIAM platform that survives a decade of changing privacy laws, new threats, and new device types. What we did at LoginRadius.
Shipping consent management at LoginRadius and what we learned about turning a regulation into a platform feature.
Streaming platforms hold rich behavioural data and high-value accounts. Here is how to secure both without breaking the viewing experience.
The pandemic-era shift to remote work permanently changed the threat model. Here is what stuck and how to defend against it now.
In the previous article (Guide to Digital Identity-Part 1 [https://medium.com/@dip_ak/guide-to-digital-identity-part-1-4b7c8fe45ee1]), we talked about the
Marriott International experienced a new data breach in mid-January 2020, which affected about 5.2 million guests.
Omnichannel programmes fail on identity, not on channels. How to build one resolvable customer identity across web, app, store, and contact centre.
Are you curious about the Digital Identity Ecosystem? If you have been looking for a good, reliable and easy-to-understand source of information and
When CCPA hit in 2020, most enterprises were unprepared. Here is what LoginRadius shipped to make compliance a configuration, not a rebuild.
Three calls right, three wrong, and the biggest change in media was not on the 2020 list at all. The honest scorecard, with 2026 numbers.
The concept of human identity stretches back thousands of years into unrecorded history.
More than just individuals, a perfect CIAM platform needs to be able to incorporate. There are plenty of business processes and activities loaded with
IAM is for employees, CIAM is for customers, and IDaaS is how either is delivered. Here is how they differ and which one you need.
Why we shipped progressive profiling at LoginRadius and how it changed the trade-off between data quality and conversion.
Social login still has a place, but it is no longer the front door. A practitioner's view on when to use it, how to harden it, and what is replacing it.
In 2018 we closed a $17M Series A to scale LoginRadius. Here is what the round meant and where the journey started.
The news of Canada to fine companies for not reporting data breaches is making headlines these days. Know what it means for your business.
