NRI Secure Uni-ID Libra 2.7

Consumer Identity and Access Management (CIAM) has emerged as a distinct, fast-growing branch of IAM tailored to consumer-facing organizations, where scale, user experience, and privacy/consent requirements differ sharply from workforce IAM. CIAM systems provision, authenticate, authorize, and store consumer identity data sourced from many places, improving onboarding through mobile and social login options while also enabling consent capture and customer-behavior analytics that integrate with CRM, connected devices, and marketing automation. Organizations adopting CIAM face challenges such as managing identity populations far larger than employee directories, meeting privacy mandates like GDPR and PSD2, and satisfying anti-fraud expectations, but they also gain opportunities to leverage rich customer data for marketing insights.

NRI SecureTechnologies’ Uni-ID Libra is positioned as a CIAM solution in Japan supporting both B2C and B2B use cases. Originally developed in 2008 and relaunched as Uni-ID Libra in 2017, it is used by 20+ large Japanese enterprises and serves over 100 million consumer identities. Uni-ID Libra 2.7 provides a modular CIAM platform: identity management with an extensible JSON schema and SCIM 2.0 import/export plus REST/JSON APIs; progressive profiling and centralized consent management with history, revocation, default-off toggles, parental controls, and user-facing terms management. It also supports rights like data portability and deletion (“right to be forgotten”), though some restrictions require administrator action.

Authentication includes SMS/app/hardware OTP, backup codes, and strong passwordless support via FIDO (UAF, U2F, FIDO2/WebAuthn), plus risk-adaptive step-up using device/IP/behavior signals and threat intelligence. Authorization and federation support OAuth 2.0, OIDC (including CIBA), SAML 2.0, JWT federation, ABAC, and multiple social identity providers. Deployment spans on-premises, customer IaaS, SaaS, and single-tenant hosting, built as Spring Boot microservices with Docker/Kubernetes support. Strengths include standards alignment and flexible deployment; challenges include limited presence outside Japan, missing mobile SDK, and gaps in out-of-the-box fraud/identity-proofing integrations.

• Uni-ID Libra was first developed in 2008 and rebranded and relaunched as Uni-ID Libra in mid-2017.
• NRI SecureTechnologies became a Nomura Research Institute (NRI) subsidiary in 2000.
• NRI Secure was the first Japanese company to obtain an OpenID Connect certification.
• Uni-ID Libra serves over 100 million consumer identities across 20-plus large Japanese customers.
• Uni-ID Libra 2.7 includes baseline and advanced support for FAPI 1.0.
• Uni-ID Libra 2.7 supports JWT-secured OAuth 2.0 authorization response (JARM).
• Identity data is encrypted using MySQL Transparent Data Encryption (TDE).
• Uni-ID Libra supports FIDO UAF, U2F, and FIDO2 (WebAuthn) for passwordless authentication.
• Uni-ID Libra supports OpenID Connect CIBA for backchannel authentication across separate device channels.
• Uni-ID Libra is deployed as Spring Boot microservices and supports Docker and Kubernetes.

• “Consumer Identity and Access Management (CIAM) is a fast-growing specialty within Identity and Access Management (IAM).”
• “Consumer IAM systems provision, authenticate, authorize, collect, and store identity and other information about consumers from many and sometimes unauthoritative sources.”
• “Improved user experience often manifests through consumers' mobile devices or social networks and provides an easier onboarding experience.”
• “Customer identities may be orders of magnitude larger than the employee identities enterprises have been managing.”
• “Progressive user profiling is a characteristic of CIAM in which information about a customer is incrementally collected as the customer interacts with a business’s website.”
• “The consent management is centralized, contains a history of recorded consents, and provides a consent revocation capability.”
• “Consent management provides fine-grained options for parental control and provides the ability to withdraw consent at any time.”
• “Risk adaptive authentication is available by leveraging the Uni-ID Libra risk engine integrated with step-up authentication.”
• “Uni-ID Libra provides multiple authentication methods combination support in the acr_values parameter of an OpenID Connect (OIDC) authentication request.”
• “Uni-ID Libra is deployed as multiple microservices using Spring Boot with a GUI-driven installation and configuration based on Ansible.”