Ubisecure Identity Platform

Consumer Identity and Access Management (CIAM) is a rapidly growing specialty within IAM, driven by organizations’ need to deliver better digital experiences while collecting, storing, and analyzing consumer data to improve sales and brand loyalty. CIAM is also positioned as a foundational enabler for compliance initiatives such as Know Your Customer (KYC), GDPR consent requirements, and PSD2’s Strong Customer Authentication (SCA) and behavioral analysis expectations for payments. Core CIAM capabilities highlighted include self-registration (often via social identities), consent and preference management, SSO across digital properties, multiple authentication options based on risk and policy, profile storage, SaaS integration, and fine-grained access control.

Ubisecure, headquartered in Finland with additional European offices, offers the Ubisecure Identity Platform as an API-based CIAM solution deployable on-premises, in customer-managed cloud, or as Ubisecure-hosted dedicated private cloud. It provides broad federation support (OAuth, OIDC, OIDC CIBA, SAML, WS-Federation), bulk provisioning via LDAP/REST, and multiple authentication methods, including GSMA Mobile Connect, ETSI MSS, smartphone biometrics, OTP variants, passwords, many social logins, and X.509. For scale, it uses PostgreSQL for user data and can use Redis for SSO sessions; this architecture is already used in deployments with millions of users.

The platform integrates national eIDs and Nordic bank IDs, supports consent dashboards and emerging Consent Receipt standardization, and can anonymize sensitive attributes (e.g., converting date of birth into “over 18” yes/no). It also supports multi-tier delegation (e-power of attorney) used in Nordic contexts including the Finnish Tax Authority, and can model family relationships via service contracts. Ubisecure’s RapidLEI provides high-assurance organizational identity via Legal Entity Identifiers and enables “right to represent” scenarios. Key challenges include limited built-in analytics, a primarily Nordic customer base, the need for stronger risk-adaptive authentication, and UI and IoT maturity gaps.

• CIAM is described as the fastest growing specialty in IAM that has emerged in the last few years.
• GDPR is in effect in the EU and often requires clear and unambiguous consent for use of consumer data.
• PSD2 in the EU requires strong customer authentication (SCA) and user behavioral analysis for monetary transactions.
• Ubisecure released its first CIAM product in 2006 with a focus on SSO and privacy.
• Ubisecure is based in Finland and has offices in the UK, Sweden, and Germany.
• Ubisecure Identity Server leverages external PostgreSQL database servers for user information.
• Redis can be used to store SSO session information for speed and scalability, and this model is used for systems with millions of users.
• Mobile Connect is available in 32 countries and is stated to be at version 1.1.
• An LEI is a 20-digit alphanumeric code and is described as an ISO standard.
• Ubisecure was accredited to issue LEIs in June 2018 and launched a same-session LEI issuance API in February 2019.

• “Enterprises want to collect, store, and analyze data on consumers to create additional sales opportunities and increase brand loyalty.”
• “Having IAM systems dedicated to hosting consumer identities and their associated profiles is a good first step toward KYC.”
• “Many CIAM solutions provide this capability, plus offer consumers dashboards to manage their information sharing choices.”
• “The Revised Payment Service Directive (PSD2) in the EU will require banks, financial institutions, and other payment service providers to offer strong customer authentication (SCA) and perform user behavioral analysis to authenticate and authorize monetary transactions.”
• “A binding is created between the user’s identity and the phone, enabling the ‘something you have’ portion of passwordless authentication.”
• “The PIN validation is local to the device; it is not transmitted over the air.”
• “Ubisecure supports multi-tier delegation of authority, or e-power of attorney, to manage access and authority given to third party service providers.”
• “The Identity Broker Engine, found within the Identity Platform, can also anonymize sensitive data attributes, such as Date of Birth, into a simple ‘Yes/No’ answers to questions such as ‘Is subject over the age of 18?’.”
• “Ubisecure allows the harvesting of user data via REST APIs and via log extraction, for example using LogStash, for transformation into business intelligence (BI).”
• “IoT device information can be linked to consumer identities via an app management API or through command line interface tools.”