CIAM
Customer Identity and Access Management. The identity stack for end users of a product, distinct from workforce IAM. CIAM optimizes for self-service signup, conversion, branding, and consumer-scale user volumes.
The difference from workforce IAM is not scale, it is who bears the cost of friction. A workforce user will complete whatever login you require because it is their job; a customer abandons. That inverts the design: progressive registration instead of full profiles, social and passkey options instead of mandated MFA, and consent and preference management as first-class features because the data is regulated. CIAM also owns the fraud surface that workforce identity mostly does not.
See also: what is CIAM, progressive profiling, consent management, CIAM vendors
Related on Start with Identity
- GlossaryIGA
Identity Governance and Administration. The discipline of managing who has access to what, why, and for how long. Covers access certification, segregation of du
- BlogHow to vet a national digital ID before you build KYC on it
Not every national ID is equally trustworthy or equally easy to verify. A practical seven-point checklist for evaluating a country's digital ID before you wire
- GlossaryIdentity Assurance Level (IAL)
NIST 800-63A levels describing identity proofing strength. IAL1: self-asserted. IAL2: remote or in-person verification with evidence. IAL3: in-person verificati
- GlossaryKYC
Know Your Customer. Regulatory obligations to identify and verify the identity of customers, primarily in financial services. KYC is a workflow built on top of
- ArticleB2B vs B2C CIAM: Tenancy, Organizations, and Architecture
B2B and B2C customer identity share a name but differ in architecture. This guide explains the organization and tenancy model, who administers users, and why ch
- RankingBest CIAM for B2B SaaS: Top 5 Customer Identity Platforms
The best CIAM platforms for B2B SaaS in 2026: WorkOS, Frontegg, Auth0, SSOJet, and Stytch. Ranked for enterprise SSO, SCIM, multi-tenancy, and self-service admi