Building a Customer Identity and Access
Management (CIAM) Solution
August 1, 2017
Johann Nallathamby Maduranga Siriwardena
Senior Lead Solutions Engineer Senior Software Engineer
1
2017 Summer School Webinar Series
2
Customer
IAM
Traditional IAM
Consumer IAM
Customer
IAM
Is Customer IAM a separate discipline
from Employee IAM?
Customer
IAM
Customer
IAM
THE DIGITAL BUSINESS LANDSCAPE
Digital products, services, and business models, along with
consumer demands are reshaping the landscape of many industries
Focus on
customer
experience
2
Using analytics to better
understand and serve
customers, and optimizing
the customer experience
across multiple channels.
3 Optimizing
operations
Using technology to
empower workers with
improved communications,
and moving toward
data-driven decision
making.
Creating new digital
products or delivering new
digital services based on
data related to the physical
product.
Evolving
business
models
1
Customer
IAM
Customer
IAM
Customers want to be part of
the product or service lifecycle
ProductManufacture Inventory
Procurement
Distribution
Supplier
Logistics
Retailer
Working
Conditions
Involved in
design
Watch &
Track
Global
Options
PhygitalSustainability
Diversity
Customer
IAM
Customer
IAM
Data
Breaches
There have been 13 billion data breaches since 2013
Customer
IAM
Data
Breaches
Over ⅔ of consumers don’t trust brands with their
data
Customer
IAM
Data
Breaches
“We should have done a better job in
communicating what these policies mean and how
any information you choose to share will – and will
not – be used”
Daniel Ek, Chief Executive, Spotify
Customer
IAM
Data
Breaches
Since implementing a transparent approach to
privacy, about 2 years ago Facebook has added 467
million new users, for a total of 1.86 billion users at
the end of 2016
Customer
IAM
Data
Breaches
In a survey 61% of respondents who have Facebook
accounts have updated their Facebook privacy
settings
Customer
IAM
Data
Breaches
Customer
IAM
Data
Breaches
The EU Cookie Law
Customer
IAM
Data
Breaches
In a survey conducted for companies only 9% believe
that the current methods of cookie policies, check
boxes and terms and conditions will adopt to the
digital age
Customer
IAM
Personas
It should NOT be possible to automatically link
up everything we do in all aspects of how we use
the Internet. A single identifier that stitches
everything up would have many unintended
consequences.
By Kim Cameron
Customer
IAM
User Centric
Identity
assurance/personalization
anonymity
Customer
IAM
Progressive
Identity
Progressive Identity/Profiling
Anonymous Know Your Customer (KYC)
Customer
IAM
Progressive
Identity
Customer
IAM
Progressive
Identity
Customer
IAM
Progressive
Identity
Customer
IAM
Progressive
Identity
Customer
IAM
Progressive
Identity
Customer
IAM
Progressive
Identity
Customer
IAM
Progressive
Identity
Customer
IAM
GDPR
Must have
• Risk based authentication and authorization
• Customer control
• Opt-in not opt-out
• Explicit consent on usage or storage
• On an attribute basis
• Notice obligations
• Explicit right to erasure and to be forgotten, right
to restriction of processing
• Right to data portability
Drivers
• More scale
• Better UX
• New market needs
• Evolving business models
Good to have
• Audit trail of consent
Customer
IAM
Digital
Economy
$
`
Payment Services Directive (PSD2) will
revolutionize the way the financial industry is
going to operate
Customer
IAM
What next?
31
Q&A
32
OPEN TECHNOLOGY FOR YOUR AGILE DIGITAL BUSINESS
THANK YOU
33

Building a Customer Identity and Access Management (CIAM) Solution