--- title: CIAM - Flexible authentication --- - [Download a trial](https://www.openiam.com/download-a-trial) - [Sales](https://www.openiam.com/contact-sales) - [Support](https://openiam-help.freshdesk.com/support/login) - [Login](https://help.openiam.com/knowledge) [![logo](https://www.openiam.com/hubfs/logo.svg "logo")](https://www.openiam.com/?hsLang=en) - [Home](https://www.openiam.com) - Products - Solutions - Partners - About Us - Consulting - Resources [Request a Quote** ](https://www.openiam.com/request-a-quote?hsLang=en) - Workforce Identity* * - Customer Identity* * - Comparison* * - Subscriptions* * #### All Features Overview of all features in Workforce Identity #### User Onboarding and Offboarding Automate joiner, mover, leaver processes #### Access Request Access requests with multi-step approvals #### User Access Reviews Save time with user access reviews #### Self-Service Portal Self-service portal for all end user activities #### Segregation of Duties Detect and remediate SoD violations #### Password Management Enforce password policies and enable synchronization #### Single Sign-On (SSO) Enable SSO using standards - SAML, oAuth, OIDC #### Authentication and MFA Improve security with adaptive authentication and MFA #### 3rd Party IdP Integration Integrate with your existing identity provider #### Integration API Use the REST API to add identity into your applications #### Connector Library Integrate on-premise and SaaS applications #### Modern Architecture Microservice architecture that supports deployment using RPM, Kubernetes or OpenShift #### Workforce Identity Concepts #### All Features Overview of all features in Customer IAM #### Authentication and MFA Improve security with adaptive authentication and MFA  #### Single Sign-On (SSO) Enable SSO using standards - SAML, oAuth, OIDC #### Password Management Enforce password policies and enable synchronization #### Modern Architecture Microservice architecture that supports deployment using RPM, Kubernetes or OpenShift #### Customer Identity Concepts #### Community vs Enterprise Summary of the differences between the Community and Enterprise editions #### Subscription Benefits Overview of the benefits provided by an OpenIAM subscription - Integrations* * - Verticals * * - Workforce Use Cases* * - CIAM Use Cases* * - Compliance* * - Data Breach Mitigation* * #### Active Directory #### Azure (O365) #### SAP #### Workday #### AWS #### Linux Server #### LDAP #### Microsoft SQL Server #### Google Cloud #### Windows Server #### Oracle EBS #### ServiceNow #### Oracle Fusion #### Entra ID #### Salesforce #### Keycloak #### Custom Applications #### Education Manage identity for students, staff and alumni #### Financial Services Address the compliance and security challenges of the financial sector #### Manufacturing #### Identity Governance That Works in Practice #### Access Governance #### CIAM for Regulated Industries #### NIS2 Achieve compliance with the EU directive for cybersecurity frameworks. #### DORA Comply with the Digital Operational Resilience Act for the EU. #### HIPAA For healthcare organizations seeking HIPAA compliance. #### PCI DSS Compliance with the Payment Card Industry Data Security Standard #### SOC 2 Solutions for organizations subject to SOC 2 audits #### GDPR Take advantage of OpenIAM to comply with the General Data Protection Regulation #### Social Engineering Attacks - Partners* * #### Current Partners Our Current Partners #### Partner Registration - About Us* * #### About OpenIAM Learn about OpenIAM #### Press Releases References to OpenIAM press releases #### OpenIAM in the Media References to OpenIAM in the media #### Careers Learn about open positions at OpenIAM. - Consulting* * #### Proof of Value Customized engagement to confirm defined proof of value objectives #### Jump Start Customized engagement to rapidly deliver a solution into production #### Solution Implementation Engagement with the objective to deliver a complete IAM solution based on customer requirements - Resources* * #### Videos Collection of videos describing how OpenIAM can be used to solve common use cases #### Community Portal Collaborative community portal to learn more about OpenIAM #### CE Documentation Documentation for the Community Edition #### Blog Musings on identity penned by the OpenIAM team #### Webinar Calendar Upcoming webinars and training sessions #### Workforce Identity Concepts #### Customer Identity Concepts #### SAP SoD Risk Reference for Manufacturing # Use cases ## Problem While some of the access that a user has can be defined as birthright access (access that is automatically granted based on some criteria), there may be other access that is not automatic. This access needs to be requested. ![image-06](https://www.openiam.com/hubfs/image-06.jpg) ### Organizations that have not implemented an IAM solution try to solve this problem using either: - Excel-based forms that end-users complete and then submit to AD - Service desk solutions like ServiceNow, Remedy or FreshService ### The problem with the first approach is that it’s cumbersome at best: - The user has no visibility into a request - Service desk staff must transfer the content manually - No audit information ![image-07](https://www.openiam.com/hubfs/image-07.jpg) ![image-06](https://www.openiam.com/hubfs/image-06.jpg) ### Using a service desk solution also has problems: - The service desk solutions are not connected with target systems and have no easy way to maintain an entitlement catalog - Audit information is now distributed across applications which again increases the complexity of performing regular SOC-2 audits. ## Solution overview OpenIAM’s Workforce Identity solution provides a comprehensive, easy to use access request solution. The sections below describe how OpenIAM can simplify access requests for both users and administrators. ### Rich entitlement catalog Entitlements for each application can be imported into OpenIAM using the connectors or through a CSV file. Once loaded, these applications and their entitlements are available through the catalog in the self-service portal. ### Multi-level workflows OpenIAM supports N levels of approvals. Approval flows can be defined at either the application or entitlement level. If there is consistency in the approval flow, then it can be defined at the application level and then over-ridden at the entitlement level if a particular entitlement has a different approval flow. ### Time-based access OpenIAM supports the ability to request access for a specified length of time. Entitlements can also be configured with a “max duration period” where access cannot be requested for duration longer than is allowed by the duration parameter. ### Reminders and escalations All workflows in OpenIAM support the ability to send reminders and to escalate when requests have not been processed in a timely manner. ### Delegation In some cases, requests need to be reassigned to another reviewer. OpenIAM allows both individual and bulk delegation of requests. Similarly, out-of-office delegation can also be defined where requests are routed to another person. In the case of senior executives who do not want to receive such requests, a permanent delegate can be defined. ### Audit and compliance With all operations being processed by OpenIAM, there is a detailed audit log which can be provided to auditors that shows how, why and when access was granted. ### Integration with ticket systems such as ServiceNow Customers that use ServiceNow, FreshService or another ticket system can also leverage the OpenIAM catalog. Requestors can create tickets in OpenIAM and once the request has been approved, a notification is sent to the ticket system where service desk staff can follow their normal processes to full request. ## Let’s Connect #### Managing identity can be complex. Let OpenIAM simplify how you manage all of your identities from a converged modern platform hosted on-premises or in the cloud. For 15 years, OpenIAM has been helping mid to large enterprises globally improve security and end user satisfaction while lowering operational costs. [Download a Trial** ](https://www.openiam.com/download-a-trial?hsLang=en) [Contact Sales** ](https://www.openiam.com/contact-sales?hsLang=en) ![footer-top-logo](https://www.openiam.com/hubfs/OpenIAM-2022/Images/SVG-Icons/footer-top-logo.svg) [![openIAM-white-logo](https://www.openiam.com/hubfs/OpenIAM-2022/Site-Logo/openIAM-white-logo.svg "openIAM-white-logo")](https://openiam.com?hsLang=en) All modules of our IAM platform share a common infrastructure allowing customers to see one unified identity solution versus a collection of disparate products. - [![linkedin-icon](https://www.openiam.com/hubfs/OpenIAM-2022/Images/SVG-Icons/linkedin-icon.svg) ](https://www.linkedin.com/company/openiam-llc) - [![facebook-icon](https://www.openiam.com/hubfs/OpenIAM-2022/Images/SVG-Icons/facebook-icon.svg) ](https://www.facebook.com/openiam) - [![twitter-icon](https://www.openiam.com/hubfs/OpenIAM-2022/Images/SVG-Icons/twitter-icon.svg) ](https://twitter.com/openiam) - [![youtube-icon](https://www.openiam.com/hubfs/OpenIAM-2022/Images/SVG-Icons/youtube-icon.svg) ](https://www.youtube.com/c/OpeniamLLC/featured) [sales@openiam.com](mailto:sales@openiam.com) [(858)935-7561](tel:(858)935-7561) ![](https://www.openiam.com/hubfs/OpenIAM-2022/Images/Pattern-Images/footer-bg-pattern.svg) Copyright © 2026 OpenIAM. All rights reserved. - [Privacy Policy](https://www.openiam.com/privacy-policy)