Terminology Index
Glossary
1 term tagged "ciam-distinct-from-iam"
Showing 1-1 of 1 term
CIAM Distinct from IAM
The recognition that customer identity (CIAM) differs fundamentally from workforce identity (IAM): it serves millions of external, untrusted users who self-register, demands privacy and consent handling, and prioritizes a low-friction experience over administrative control.
Workforce IAM manages a known, finite set of employees provisioned and governed by the organization. CIAM instead faces the open internet, where users create their own accounts, expect a smooth sign-up and login, and bring privacy rights the organization must honor. These differences reshape priorities: scale, fraud and bot defense, consent, and conversion become first-class concerns that barely register in enterprise IAM. Treating CIAM as just 'IAM for customers' is the mistake this concept exists to prevent.
Introduced in: Customer Identity and Access Management
Examples
- Customers self-registering, unlike employees provisioned by HR.
- Designing login to minimize friction so customers do not abandon sign-up.
- Handling consent and data subject rights that workforce IAM never deals with.
No related terms linked yet.
