Customer Identity and Access Management (CIAM)

CIAM is about creating seamless, secure user experiences for prospects, customers and partners to give them access to their products and your services. From customer identification and onboarding to logging in.

What I can do

CIAM Platforms

I have experience with product selection and implementation of CIAM platforms and accompanying API security and token management for large-scale customer portals.

• Enterprise Solutions: OneWelcome, ForgeRock, WSO2 IS, Auth0
• Cloud Identity Platforms: AWS Cognito, Azure Entra, Google Identity Platform
• Technology: OAuth 2.0, OpenID Connect (OIDC), SAML2.0, LDAP, mTLS

Customer Journey Optimization

CIAM is not just about logging in. A seamless identification and onboarding process ensures that the customer can easily but securely get access to your online services. Perhaps you want your customers to be able to use their favourite social identity to log in. Finally you want your business customers to be able to create users for their company themselves.

• Prospect users: Trial accounts, Progressive profiling, Single identity journey
• Onboarding Flows: Secure but user-friendly customer identification and onboarding processes
• Self-Service Portals: Self-service customer portals and mobile apps
• Delegated User Management: Enable business customers to manage their own users on your platform
• Federated Identities: Let customers choose their identity like Google or Apple ID, or government services such as DigiD and eHerkenning

API authentication

To retrieve customer data for a self-service website APIs must be used. I have a lot of experience securing APIs and using the user identity to determine authorisations on what the customer may and can do with the API.

• Entitlement checks: What roles does a user have on a product (policy holder, authorised person, etc.)
• RBAC, ABAC, PBAC: Different ways to determine what a user may do with APIs and data
• Continuous access evaluation: Keep verifying whether the user behaviour is logical and if not, take measures