NRI Secure Uni-ID Libra

Japan’s Consumer Identity and Access Management (CIAM) market is expanding as organizations need stronger identity controls to secure digital transactions and manage customer data. CIAM differs from workforce IAM by serving B2C, B2B customer, and G2C use cases at far higher scale, prioritizing low-friction user experience across mobile and social channels, and adding capabilities like consent collection, customer behavior analysis, and integration with CRM and marketing automation. Adoption is complicated by legacy systems in many Japanese firms and rising privacy, anti-fraud, and regulatory demands.

Foundational CIAM capabilities include massive scalability, flexible deployment (SaaS, hybrid, on-prem), microservices, self-registration and social login, strong account recovery (without security questions), MFA and phishing-resistant passwordless authentication (passkeys/WebAuthn), workflow orchestration, compromised credential intelligence, risk-adaptive authentication, federation standards (SAML, OAuth, OIDC, JWT), SSO across brands, marketing/CRM connectors, identity proofing integrations, SIEM/ITSM integration, analytics and dashboards, and data residency plus audit support.

NRI Secure Technologies’ Uni-ID Libra is a Japan-focused CIAM offering (originating in 2008; relaunched in 2017) with identity management, authentication, authorization/federation, and a risk engine. It uses an extensible JSON schema, SCIM 2.0 for import/export and integrations, REST/JSON APIs, progressive profiling, and centralized consent management with history and revocation, plus consumer controls such as portability and deletion. Authentication supports OTP (SMS/app/hardware), backup codes, and broad FIDO coverage (UAF/U2F/FIDO2/WebAuthn, passkeys), plus OIDC features like acr_values and CIBA; it also supports FAPI 1.0 and JARM. Risk analysis leverages device fingerprinting, geolocation, IP, access patterns, and threat intelligence, enabling step-up authentication, while noting gaps in device intelligence and behavioral biometrics. Deployment spans on-prem, IaaS, or single-tenant SaaS, built as Spring Boot microservices with Ansible, and supports Docker/Kubernetes. Strengths include standards coverage, consent management, large Japanese deployments, and IoT identity support; challenges include limited in-platform analytics and fewer out-of-Japan ecosystems and integrations.

• CIAM in Japan is driven by the need to secure transactions and manage customer data.
• CIAM supports B2C, B2B customer, and G2C use cases.
• Many Japanese firms operate legacy systems that are not easily compatible with modern CIAM solutions.
• NRI Secure Technologies was founded in 2000 as a subsidiary of Nomura Research Institute.
• NRI Secure was the first Japanese company to obtain an OpenID Connect Certification.
• Uni-ID was first developed in 2008 and rebranded and relaunched as Uni-ID Libra in 2017.
• NRI Secure claims more than 20 large Japanese customers and over 100 million consumer identities served by Uni-ID Libra.
• Uni-ID Libra encrypts user data using MySQL Transparent Data Encryption (TDE) and logs data processing operations.
• Uni-ID Libra supports FIDO UAF, U2F, FIDO2 (WebAuthn), and passkeys.
• NRI Secure is ISO 27001, 27017, and 27018 certified and has not obtained SOC 2 Type 2.

• “CIAM systems provision, authenticate, authorize, collect, and store identity and other information about consumers from many and sometimes unauthoritative sources.”
• “Improved user experience is important, particularly through channels like mobile devices and social networks, which streamline the onboarding process.”
• “CIAM has also diverged from traditional IAM in supporting baseline features for analyzing customer behavior, collecting consent for user data usage, and integrating with CRM and marketing automation systems.”
• “Consumers can self-register via a user web interface and then view and manage their consent history, consent revocation, and versioned service/app terms.”
• “The consent management is centralized, contains a history of recorded consents, and provides a consent revocation capability.”
• “Consent management provides fine-grained options for parental control and provides the ability to withdraw consent at any time.”
• “Risk adaptive authentication is available by leveraging the Uni-ID Libra risk engine integrated with step-up authentication.”
• “Uni-ID Libra provides multiple authentication methods combination support in the acr_values parameter of an OpenID Connect (OIDC) authentication request.”
• “Uni-ID Libra is deployed as multiple microservices using Spring Boot with a GUI-driven installation and configuration based on Ansible.”
• “The company has yet to make plans for a multi-tenant SaaS offering.”