NRI Secure Uni-ID Libra

Japan’s Consumer Identity and Access Management (CIAM) market is expanding as organizations seek stronger identity controls to secure digital transactions and manage consumer data, while also improving user experience through mobile and social channels. CIAM differs from workforce IAM by focusing on B2C, B2B customer, and G2C scenarios, pulling identity data from many (sometimes unauthoritative) sources and emphasizing streamlined onboarding to reduce friction and increase conversion and retention. CIAM platforms in this context also add behavioral analysis, consent collection, and integration with CRM and marketing automation, even as Japanese organizations face obstacles such as legacy-system compatibility, strict privacy expectations, and rising anti-fraud regulatory demands.

NRI Secure Technologies’ Uni-ID Libra is a Japan-focused CIAM platform with large enterprise adoption, serving over 100 million consumer identities across 30+ major customers. It provides core CIAM functions—authentication, risk analysis, authorization, federation, identity management, and identity proofing—built around an identity repository. Authentication includes extensive MFA options and strong passwordless capabilities: full FIDO support (UAF, U2F, FIDO2/WebAuthn, passkeys) plus WebAuthn Level 3 features like cross-platform authentication and Conditional UI. Risk-adaptive authentication leverages a risk engine using signals such as device fingerprinting, geolocation, IP, access patterns, and threat intelligence, with rule-based triggers and API access for monitoring.

Uni-ID Libra supports modern authorization and federation standards (OAuth 2.0, OIDC, SAML 2.0, CIBA, FAPI 1.0, JARM) and integrates social logins via multiple prebuilt IdPs. Identity management includes SCIM 2.0, progressive profiling, centralized consent with revocation, and privacy rights features like portability and deletion, with encrypted storage and logged operations. Newer capabilities include identity proofing via Japan’s national ID verification app connector and an eKYC connector (currently TRUSTDOCK), plus DID Connectors enabling verifiable credential issuance and presentation with wallet interoperability. Deployment is flexible (on-prem, IaaS, SaaS single-tenant), microservices-based, container-ready, and supported by admin consoles and APIs, while challenges remain in analytics depth, device/behavioral biometrics, and broader global ecosystem presence.

• NRI Secure Technologies was founded in 2000 as a subsidiary of Nomura Research Institute.
• NRI Secure was the first Japanese company to obtain an OpenID Connect Certification.
• Uni-ID Libra serves over 100 million consumer identities across 30-plus large Japanese customers in industries including automotive, financial services, retail, media, and telecom.
• Uni-ID Libra supports FIDO UAF, U2F, FIDO2 (WebAuthn), and passkeys for passwordless authentication.
• Uni-ID Libra supports the WebAuthn Level 3 specification, including cross-platform authentication and Conditional UI for password autofill.
• Uni-ID Libra supports OIDC CIBA for authentication flows across separate device channels.
• Uni-ID Libra includes baseline and advanced support for FAPI 1.0 and supports JARM for signed and optionally encrypted authorization responses.
• Risk factors evaluated by the Uni-ID risk engine include device fingerprint, geolocation, IP address, frequency/interval of access, page transitions, and service usage.
• Approximately 70% of Japanese citizens possess a national ID card.
• Uni-ID Libra’s only currently supported eKYC service provider is TRUSTDOCK.

• “CIAM is a well-established and innovative branch of the broader IAM field.”
• “CIAM solutions are designed to address specific technical requirements that consumer-facing organizations have that differ from traditional ‘workforce’ or business-to-employee (B2E) use cases.”
• “CIAM systems provision, authenticate, authorize, collect, and store identity and other information about consumers from many and sometimes unauthoritative sources.”
• “Improved user experience is important, particularly through channels like mobile devices and social networks, which streamline the onboarding process.”
• “With all the inherent weaknesses of passwords affecting both security and convenience, passwordless authentication has seen a steep increase in adoption for both workforce and consumer identities.”
• “Uni-ID Libra provides multiple authentication methods combination support in the acr_values parameter of an OpenID Connect (OIDC) authentication request.”
• “Risk analysis rules are defined through their web-based administration console, including threat analysis settings.”
• “Progressive user profiling is a characteristic of CIAM in which information about a customer is incrementally collected as the customer interacts with a business’s website.”
• “The centralized user interface provides simple toggle switches for each consent option, set to ‘off’ by default for privacy.”
• “DID Connectors function as protocol bridges that facilitate interoperability between OIDC-based services and digital wallet applications.”