CIAM
5 Signs Your Traditional IAM System Needs a CIAM Makeover
Traditional IAM was built for employees, not customers. Here are five signs your IAM cannot do the CIAM job and what to fix.
Identity & CIAM
How people prove who they are online, and how products get that right at scale. Passkeys, MFA, account recovery, CIAM architecture and the standards underneath them.
195 posts, newest first. Page 5 of 7.
Tags in this track:CIAMAuthenticationpasskeysPasswordlessMFADigital IdentityidentityIAMCustomer Identitydecentralized identityFIDOWebAuthnoAuthauthorization
digital identity
Why B2B Companies Should Implement Identity Management
Most B2B SaaS companies bolt on identity as an afterthought. After scaling a CIAM platform to 1B+ users, I learned that getting identity right from the
social media
SSO vs. Social Login: What’s the Difference? [Infographic]
Single sign-on and social login both reduce password friction, but they solve different problems. Here is when to use each.
authentication
Cross-Device Authentication and Tracking: The Opportunities and Underlying Privacy Risks
Cross-device authentication promises one identity across phones, laptops, and TVs. The privacy trade-offs deserve a hard look.
authentication
M2M Authorization: Authenticate Apps, APIs, and Web Services
OAuth 2.0 client credentials grant explained: how services authenticate to each other, request scoped tokens, and call APIs without a user in the loop.
authentication
Will Decentralized Auth Change the Perception of Consumer Identities in 2022?
Whether we talk about inappropriate data collection or a loophole in managing consumer identities, anything could lead to compromised sensitive
digital identity
Is the Rise of Machine Identity Posing a Threat to Enterprise Security?
Machine identities now vastly outnumber human ones in most companies, and they are poorly governed. Here is the risk and the fix.
breach
How Lapsus$ Breached Okta and What Organizations Should Learn
Businesses have to be extra vigilant in safeguarding customer data. Minor mistakes can cause a massive data breach, violating data privacy regulations and
digital identity
Everyone's and identity driven company (even if you aren't one)
What does it mean if everyone’s an identity driven company? Before answering that question, let’s define what it means to be an identity-driven company.
blockchain
Decentralized identity using blockchain
Decentralized identity is becoming a reality for users of blockchain-based applications, and it’s thanks to the proliferation of unique, verifiable identifiers.
SSO
Multi-Brand Ecommerce: Creating a One-Brand Experience Using SSO
One identity behind the scenes, full brand expression in front of it, and consent scoped per brand. The architecture that survives an audit.
software
What Software Developers and IT Pros should Know about Making the Switch to Identity
The increasing number of account fraud and consumer data breaches indicate an immediate need for a robust mechanism to mitigate the risk.
MFA
How to Use Multi-Factor Authentication When You Don’t Have Cell Phone Access
To verify the identity of clients, many security-minded organisations use multi-factor authentication.
authentication
Credential Stuffing: How To Detect And Prevent It (Updated)
Credential stuffing exploits password reuse at industrial scale. Here is how it works and the layered defences that actually stop it.
digital identity
Identity as a Service (IDaaS): Managing Digital Identities
Identity as a Service is the cloud-delivered form of IAM. What IDaaS includes, why companies pick it, and how to evaluate the major platforms.
Best Practices
Email is Hacked : 7 Immediate Steps To Follow
The golden terms for a hacker to access your personal information and get access to all your accounts are hacked emails.
customer data
Corporate Account Takeover Attacks: Detecting and Preventing it
Corporate account takeover attacks let criminals impersonate employees, drain accounts, and pivot inward. Here is how to detect and stop them.
digital identity
What is Identity Governance & Administration?
Identity Governance and Administration is the policy and audit layer on top of IAM. Why every mid-sized organization now needs it and what to evaluate.
authentication
What is lazy registration and how it is solving the problem of early registration
Many users switch websites when they are bombarded with lengthy registration forms too early. The solution to this is lazy registration
infrastructure
How Poor Login Concurrency can Impact OTT Platforms' Business
Account sharing on streaming platforms is now a revenue and security problem. Concurrent-session limits are a key part of the answer.
authentication
Cookie-based vs. Cookieless Authentication: What’s the Future?
Cookies vs. JWTs for authentication: how each works, where each fits, and why most modern systems run both side by side across web, mobile, and API surfaces.
MFA
How to Set Up Two-factor Authentication on All Your Online Accounts
A practical guide to turning on two-factor authentication across the accounts that matter, with the right method for each.
digital identity
The Different Ways Artificial Intelligence Solves Real-World Digital Identity Challenges
Forward-looking businesses are using artificial intelligence to solve real-world digital identity challenges.
SSO
Federated Identity Management vs. SSO: What's The Difference?
Enterprises need to use methods to maximize the use of digital identities for multiple users.
CIAM
Role of CIAM in digital transformation
Digital transformation has become the need of the hour for every consumer-focused business today
digital identity
The Major Challenges of Customer Identification in the Retail Industry
Retail identity is uniquely hard: high volume, low margin, omnichannel, and fraud-heavy. Here are the challenges and how to address them.
digital identity
Identity Theft - Explicit Increase in Financial Crimes
Using someone's PII such as driving license number, social security number, address, credit card details, and name to perform different crimes and
IAM
Identity and access management challenges in the contemporary IoT ecosystem
What are the challenges businesses face related to identity management in IoT
application security
Why IAM Architects Prescribe Enterprise Application Security
Authentication is usually fine. Authorization is usually improvised. An IAM architect's 2026 view of enterprise application security.
SSO
SAML or OIDC: Which is Better For Your Business?
SAML and OIDC both enable single sign-on. They have different strengths and the right choice depends on the audience you serve.