Widas ID GmbH cidaas

Consumer Identity and Access Management (CIAM) is a rapidly growing part of IAM aimed at organizations that interact directly with consumers and citizens, balancing security, user experience, and large-scale data collection. CIAM systems provision, authenticate, authorize, and store consumer identities across many domains, often ingesting identity data from multiple unauthoritative sources. The resulting data supports not only access decisions but also marketing analytics and compliance programs such as AML, while needing to scale to millions of identities and potentially billions of daily transactions. SaaS delivery is increasingly the default model.

CIAM platforms commonly provide social login, multi-factor authentication (MFA), risk-adaptive authentication, account recovery, fraud and compromised-credential intelligence, identity analytics, business intelligence for marketing, privacy and consent management, and emerging IoT device-to-identity association. Strong emphasis is placed on regulatory drivers such as KYC requirements in financial services and GDPR’s demands for explicit consent, user transparency, change notifications, and data deletion/export.

cidaas, built and operated by Widas ID GmbH (WidasConcepts group), is a multi-tenant CIAM SaaS launched in 2015 that can also be deployed on-premises for large enterprises. It supports white-label branding, self-registration portals, LDAP bulk import, OIDC interoperability, broad authentication options (including passwordless and FIDO), social logins, and standards-based federation (SAML, OAuth2, OIDC, JWT/JWE). Recent additions include eIDAS-compliant identity verification using document scanning, face recognition, liveness detection, and NFC chip reading. The platform adds bot detection and ML-driven fraud defense, progressive profiling, extensive reporting, and GDPR-aligned consent dashboards, while highlighting future expansion in hosting options, availability features, and international certifications.

• CIAM solutions are designed to improve digital experiences and enable organizations to gather more information about consumers using their services.
• Consumer identity data can support authorization, marketing analysis, and Anti-Money Laundering initiatives.
• SaaS delivery of CIAM services is trending upward and is expected to remain the default choice for most organizations.
• GDPR requires clear and unambiguous consumer consent for the use of personal data.
• cidaas was launched in 2015 and grew to around 120 employees.
• cidaas is a fully multi-tenant CIAM SaaS offering tiered plans by ranges of users and devices, with enterprise licensing options.
• cidaas supports more than 15 authentication methods, including FIDO, and provides mobile push notifications.
• The cidaas ID Validator supports scanning official IDs, face recognition, liveness detection, and NFC chip reading for stronger validation.
• As of mid-2021, cidaas manages more than 150 million user identities.
• cidaas states it can process 250,000 logins and 250,000 registrations in parallel per second on a single instance.

• “Simple SMS OTP is not secure and is not recommended.”
• “Unlike workforce IAM systems though, information about these consumers often arrives from many unauthoritative sources.”
• “Moreover, CIAM systems must be able to manage many millions of identities, and process potentially billions of logins and other transactions per day.”
• “EU-GDPR requires collecting clear and unambiguous consent from consumers for the use of their data.”
• “The micro-services architecture allows for rapid manual scaling and de-provisioning to accommodate heavy or unexpected loads, with auto-scaling.”
• “Progressive profiling is supported to gather growing insights into cidaas' flexible consumer profile storage during their identity lifetime.”
• “Consumer identity solutions are increasingly under attack by fraudsters.”
• “Server-based bot detection counters increasing attacks from botnets, which are commonly used in credential stuffing attacks that come with Account Takeover (ATO) fraud attempts.”
• “Upcoming releases are expected to allow customers to choose their IaaS providers and geographic locations for hosting, while adding high availability and failover options.”
• “The melding of consumer identities with consumer-owned devices is a high priority and growth area.”