Difference between Identity and Access Management(IAM) vs Consumer/Customer Identity and Access Management(CIAM)

This is a very typical question asked and searched on the web most of the time - what is the difference between IAM and CIAM. Below are the few points which can clarify this -

• IAM is typically used for employees where as CIAM is typically used for external users like Consumers or customers.
• In IAM typically users are registered by employee on boarding process but in CIAM in most of the scenario its self registration.
• IAM is typically bound in closed company network where as CIAM is typically public facing.
• In IAM, identity data is collected to monitor and control the access where as in CIAM its typically transnational, marketing, advertisement etc.
• Also, IAM is typically more restrictive as its used to access the internal resource where as CIAM is more flexible.

These two shares alot of similarities and this is the reason people are more confused. If we list out the capabilities both have common -

• Single Sign on
• User/Customer Life cycle management
• Authorization
• MFA
• Password management
• Federation etc.

Best tool present for IAM and CIAM -  Sailpoint IIQ, OKTA, Forgerock, Ping, Oracle etc.. All these tools can be utilized for both IAM and CIAM.