Onegini Connect

Consumer Identity and Access Management (CIAM) is a rapidly growing specialty within Identity and Access Management, driven by businesses and public-sector organizations needing better digital experiences while collecting richer consumer data to increase sales opportunities and brand loyalty. CIAM also supports regulatory demands such as Know Your Customer (KYC) requirements aimed at reducing money laundering, cyber-crime, terrorist financing, and fraud. In the EU, GDPR requires clear, unambiguous, purpose-specific consent, which many CIAM platforms address through consent capture, user dashboards for managing data-sharing choices, consistent privacy policy enforcement, and mechanisms to notify users of updated terms and collect acknowledgement. PSD2 further raises requirements by mandating strong customer authentication (SCA) and behavioral analysis for transaction authorization, making sophisticated CIAM capabilities a competitive advantage for financial institutions.

Onegini, a Netherlands-based provider founded in 2011, offers Onegini Connect as on-premises software or single-tenant SaaS. It targets finance, health care, and insurance, aiming for frictionless onboarding while maintaining strong security. The platform supports a wide range of identity providers for registration (including regional bank and government IDs), remote identity proofing via integrations (e.g., IDnow, Mitek ID Checker, WebID Solutions), and broad authentication options for web and mobile. Mobile integration is strengthened by extensive SDK support and native authenticators (device ID, PIN, biometrics), including FIDO-enabled facial recognition.

Onegini provides basic identity analytics dashboards and exports data via APIs for analysis in SIEM tools (e.g., ArcSight, LogRhythm, QRadar, Splunk) and marketing platforms (e.g., Marketo, Salesforce). GDPR support includes consent dashboards, deletion requests, and EU-based data centers. The solution supports branding, portal-based self-registration, LDAP bulk import, and standards-based integration (SAML, OAuth, OpenID Connect), with SCIM planned on its roadmap. Strengths include diverse authenticators, mobile security, and IoT integration for insurance use cases, while challenges include limited built-in marketing analytics and a need for stronger compromised-credential and threat-intelligence integrations.

• CIAM solutions commonly include self-registration, consent mechanisms, SSO across digital properties, multiple authentication options, profile storage, SaaS integration, and fine-grained access control.
• Onegini is headquartered in the Netherlands and was founded in 2011.
• Onegini has over 200 clients serving more than 45 million users.
• Onegini Connect is offered as an on-premises solution or as single-tenant SaaS instances.
• On-premises deployments support MySQL, Microsoft SQL Server, and Oracle databases.
• Remote identity proofing integrations include IDnow, Mitek ID Checker, and WebID Solutions.
• Onegini supports mobile SDKs for Android, iOS, Cordova, NativeScript, Ionic, Mendix, OutSystems, and Xamarin.
• Onegini provides basic identity analytics dashboards and exposes data via APIs for use in third-party tools.
• Onegini supports the right to data deletion upon request.
• The code base was Secure Software Foundation certified in 2015.

• “CIAM is the fastest growing specialty in Identity and Access Management (IAM) that has emerged in the last few years to meet evolving business requirements.”
• “Enterprises want to collect, store, and analyze data on consumers to create additional sales opportunities and increase brand loyalty.”
• “When GDPR takes effect in the EU in 2018, collecting clear and unambiguous consent from consumers for the use of their data will become mandatory.”
• “The Revised Payment Service Directive (PSD2) in the EU will require banks, financial institutions, and other payment service providers to offer strong customer authentication (SCA) and perform user behavioral analysis to authenticate and authorize monetary transactions.”
• “The company mission is to enhance customer engagement by means of a frictionless onboarding (as a service) and access process while providing a safe and secure customer experience.”
• “After registration, users do not need to link these accounts, and account information is not shared with IDPs.”
• “Onegini provides consumer data dashboards, where users can see, manage, and change permissions for the use of their data.”
• “Onegini encrypts all customer data at rest and in transit.”
• “Their Connect CIAM offering has many innovative features, such as the leading-edge integration of home safety and security IoT sensors with consumer identities.”
• “Onegini Connect would benefit by supporting compromised credential, fraud, threat intelligence integration capabilities.”