CIAM fundamentals

Customer identity is its own discipline, not a smaller version of the IT login. CIAM authenticates and manages external users — customers, partners, citizens — who self-register, can leave at any time, and judge you on how fast and clean the experience feels.

That makes it fundamentally different from workforce identity (IAM), which manages a known, bounded population of employees and optimizes for governance and least privilege. The buyer is different, the scale is different (tens or hundreds of millions vs. thousands), and the priorities invert: CIAM trades governance-first design for conversion, privacy, and fraud defense.

Knowing which problem you’re buying for changes the entire vendor list before you compare a single feature — a platform tuned for employee governance is usually wrong for a sign-up flow that has to convert, and the reverse holds too. Start here.