TrustBuilder Identity Hub

Identity & Access Management (IAM) has evolved from a primarily preventive discipline into a broader set of capabilities that prevent, detect, and now also respond to security threats. Early IAM focused on access administration and controlling entry to secured resources, expanding core technologies to include identity provisioning plus the foundational functions to authenticate, authorize, and audit. A later generation added detection through Access Governance—introducing business participation in administration—and through integration with Security Information and Event Management (SIEM) tools. The newest IAM iteration adds response capabilities through Access Analytics and Intelligence: analytics examines historical data to uncover trends and patterns, while intelligence uses those findings to drive access decisions that can be actioned, improving governance, compliance, and administration. Modern IAM also requires integrations across adaptive authentication and authorization, real-time security intelligence, software-defined environments, and privilege management as threats continue to change.

TrustBuilder Corporation (founded as SecurIT in 1999 and rebranded in December 2017) targets B2B, B2C, and B2E IAM use cases, with a strong enterprise focus in Banking and Insurance and offices across several European countries plus the United States. Its primary platform, TrustBuilder Identity Hub, is delivered on-premises or cloud-hosted and provides centralized administration and policy enforcement via an open, standards-based, pluggable architecture. It includes authentication, authorization, and Single Sign-On (SSO) supporting OAuth, OIDC, SAML, and WS-Security, and enables adaptive, risk-based authentication using contextual signals such as device IP, fingerprinting, and geolocation. The platform integrates with third-party MFA, offers a no-additional-cost mobile authenticator supporting soft-OTP and push, supports attribute-based access control, avoids identity-store duplication via synchronization, provides self-service and onboarding via GUI and APIs, and includes logging, auditing, and flexible reporting. Recent enhancements add Docker/Kubernetes/OpenShift support, GDPR consent management prompts at login, improved activity grouping for audit workflows, transaction signing to support PSD2 strong authentication, and UI/workflow designer improvements. Key challenges include limited IDaaS/multi-tenancy, relatively absent access governance, and constrained brand and partner ecosystem.

• Identity & Access Management capabilities have expanded from prevention to include detection and response to threats.
• Access Governance became a core IAM technology focused on administration with business participation.
• SIEM integrations contributed to IAM’s ability to detect unauthorized access.
• TrustBuilder Corporation was founded as SecurIT in 1999 and transformed to TrustBuilder in December 2017.
• TrustBuilder targets B2B, B2C, and B2E IAM use cases and focuses strongly on Banking and Insurance enterprise requirements.
• TrustBuilder has offices in Belgium, Netherlands, Germany, United Kingdom, and the United States.
• TrustBuilder Identity Hub can be delivered on-premises or hosted in the cloud.
• TrustBuilder Identity Hub supports OAuth, OIDC, SAML, and WS-Security for SSO across web, mobile, and APIs.
• TrustBuilder for Mobile is available for iOS and Android and supports soft-OTP and out-of-band mobile push.
• Recent versions add Docker support and container manager compatibility including Kubernetes and OpenShift.

• “Identity & Access Management has come a long way since the inception of directory services and it is still actively evolving.”
• “A further generation of IAM not only tried to prevent unauthorized access to a resource, but it also added the capability to detect it.”
• “In this latest iteration, IAM adds to its ability to prevent and detect by also providing the ability to respond to the security threats.”
• “Analytics gives the ability to perform data analysis of historical data and uncover trends or pattern that can be used to improve the decision-making process.”
• “Together, access analytics and intelligence provide the ability not only detect, but to also respond to unauthorized access attempts.”
• “TrustBuilder Identity Hub offers centralized administration and policy enforcement.”
• “Based on an open, standard-based pluggable architecture, TrustBuilder Identity Hub encompasses authentication, authorization and Single Sign-On (SSO) capabilities.”
• “TrustBuilder’s flexible authentication policies allow customers to define and ease the user’s journey by providing low-friction authentication methods based on the dynamically driven contexts.”
• “Data synchronization with existing data stores avoids data duplication and eliminates the need for a common identity store.”
• “As the landscape of information security threats changes, so do the IAM capability requirements.”