iWelcome IDaaS and CIAM

Consumer Identity and Access Management (CIAM) is positioned as the fastest-growing IAM specialty, driven by organizations’ need to deliver better digital experiences while collecting, storing, and analyzing consumer data to increase sales and brand loyalty. CIAM is also framed as a foundational enabler for regulatory requirements such as KYC in financial services, GDPR consent and privacy obligations, and PSD2 needs for strong customer authentication, behavioral analysis, and consented data exchange. Typical CIAM capabilities highlighted include self-registration (often via social logins), consent controls, SSO across digital properties, multiple authentication options, profile storage, SaaS integration, and fine-grained access control.

iWelcome, headquartered in the Netherlands, is presented as a leading CIAM/IDaaS provider focused on frictionless customer journeys and GDPR compliance. It delivers a microservices-based SaaS with a flexible non-relational consumer profile model backed by MongoDB, adding attribute-level metadata for consent, classification, retention, and identity vetting. The service supports extensive federation and authentication options (including social logins, SMS OTP, SAML, OAuth, OpenID Connect, Kerberos, and market-specific credentials like XING, BankID, PostNL, and iDIN), plus mobile out-of-band authentication and transaction verification with strong in-app cryptographic protections.

The platform emphasizes interoperability and scale: provisioning and synchronization via LDAP/SCIM, integrations with AD/Azure AD, and compatibility with major IAM/SSO vendors. A risk engine uses geo-location and IP signals to trigger step-up authentication. Analytics include dashboards and integration with tools like Tableau and Qlik, with options to preserve anonymity in reporting. GDPR-oriented features include consent lifecycle management, privacy dashboards, proof of consent, export/deletion rights, retention policies, and traceable timelines of consent and attribute collection; it also supports UMA and family/delegated administration. Additional capabilities cover IoT device linking via OAuth2 Device Flow, SIEM integration, encryption options, and high availability SLAs, while challenges include EU-centric reach, a smaller partner ecosystem, and opportunities to expand authentication and analytics, alongside a roadmap for XACML authorization and Consent Receipts.

• CIAM is described as the fastest growing specialty in IAM in recent years.
• GDPR is stated to take effect in the EU in 2018.
• PSD2 requires strong customer authentication and user behavioral analysis for transaction authentication and authorization.
• iWelcome is headquartered in the Netherlands.
• iWelcome is hosted in 14 data centers across the EU, with two in the USA and two in the APAC region.
• iWelcome stores consumer profiles in a built-in MongoDB data store using a non-relational data model.
• iWelcome hosts tens of millions of consumer identities.
• iWelcome supports federation standards including SAML, Shibboleth, WS-Federation, OAuth, OpenID Connect, and Kerberos.
• The mobile app supports out-of-band authentication and transaction verification with push or swipe approval.
• iWelcome’s typical SLA guarantees 99.9% uptime, and can reach 99.99% with multi-data center failover.

• “Enterprises want to collect, store, and analyze data on consumers to create additional sales opportunities and increase brand loyalty.”
• “Having IAM systems dedicated to hosting consumer identities and their associated profiles is a good first step toward KYC.”
• “Collecting clear and unambiguous consent from consumers for the use of their data will become mandatory.”
• “CIAM solutions are expanding their capabilities to offer consumers dashboards to manage their information sharing choices.”
• “The company mission is to offer customers a complete, feature-rich IDaaS and CIAM solution with fine-grained consent management and audit response capabilities, supporting frictionless customer journeys at scale.”
• “The Mobile App is an Out-of-Band (OOB) authenticator and/or transaction verifier.”
• “The iWelcome risk engine processes geo-location and IP address information, and can trigger step-up events in accordance with client-defined policies.”
• “In order to preserve anonymity in reports, iWelcome can abstract and obscure underlying attribute details when required.”
• “The interface provides transparency for the user about the attributes retrieved with consent.”
• “Historical login, back-tracing attribute gathering, and consent actions can also be viewed as a timeline in the user’s personal information page.”