Onegini Connect

Consumer Identity and Access Management (CIAM) has emerged as a fast-growing IAM specialty as enterprises and public-sector organizations aim to deliver better digital experiences while collecting, storing, and analyzing consumer data to improve sales opportunities and brand loyalty. Regulatory pressure is a major driver: “Know Your Customer” requirements push banks and financial providers toward dedicated consumer identity systems, while GDPR requires clear, unambiguous consent for each data-use purpose, along with mechanisms for policy consistency, user notification of terms changes, and acknowledgement capture. In the EU, PSD2 RTS further requires strong customer authentication and behavioral analysis for transaction authorization—capabilities that sophisticated CIAM platforms can provide while also improving customer experience and competitiveness.

Onegini is a Netherlands-headquartered CIAM provider (founded 2012) focused on finance and insurance, offering cloud-based, single-tenant SaaS instances under a “no-code security” mission emphasizing configuration over custom development. It supports many registration and login methods (e.g., social logins, OpenID Connect, SAML/OAuth federation, regional eIDs such as iDIN/DigiD/itsme, and Microsoft AD/AAD/ADFS), plus remote identity proofing via KYC partners (e.g., IDnow, Mitek, Verimi, webID). Mobile capabilities are a key strength: extensive SDK support across major frameworks, device and app integrity signals (e.g., jailbreak/root/debug detection), and biometric options including facial recognition via a FIDO-enabled authenticator, though it lacks a full FIDO server and is not FIDO-certified.

The platform offers consent dashboards, data deletion support, EU-based data centers, whitelabel/multibrand experiences, integrations with major SaaS and industry systems, SIEM export, and strong encryption and mobile tamper-resistance features. Noted gaps include limited out-of-the-box identity/marketing analytics and a need for compromised credential and threat intelligence integrations to strengthen fraud prevention.

• CIAM is described as the fastest growing specialty in IAM to meet evolving business requirements.
• GDPR took effect in the EU in May 2018 and requires clear, unambiguous consent for each purpose of data use.
• PSD2 RTS requires strong customer authentication and user behavioral analysis to authenticate and authorize monetary transactions.
• Onegini is headquartered in the Netherlands and has offices in Germany and Poland.
• Onegini was founded in 2012 and provides a cloud-based service.
• Onegini has over 40 clients serving more than 45 million users.
• Onegini Connect is offered as single-tenant SaaS instances.
• Remote identity proofing is supported via integrations including IDnow, Mitek ID Checker, Verimi, and webID.
• Onegini achieved ISO 27001 certification in 2019.
• The code base was Secure Software Foundation certified in 2015.

• “Enterprises want to collect, store, and analyze data on consumers to create additional sales opportunities and increase brand loyalty.”
• “Having IAM systems dedicated to hosting consumer identities and their associated profiles is a good first step toward KYC.”
• “Since GDPR took effect in the EU in May of 2018, collecting clear and unambiguous consent from consumers for the use of their data has become mandatory.”
• “The company mission is to provide customers with ‘no-code security’, focusing on making implementations easy; only configuration of the service is required.”
• “Their goal is to be value-add partner for companies with limited or no IAM expertise in-house.”
• “While support for FIDO is present, the solution does not contain a full FIDO server.”
• “Onegini provides basic identity analytics dashboards within their solution.”
• “Onegini allows for whitelabeling and seamless branding.”
• “Onegini encrypts all customer data at rest and in transit.”
• “Onegini Connect would benefit by supporting compromised credential, fraud, threat intelligence integration capabilities.”