Curity is a leading provider of IAM and API security technology that enables user authentication and authorization for a wide range of digital services. The Curity Identity Server is highly scalable, and handles the complexities of the leading identity standards, making them easier to use, customize and deploy. Today, the Curity Identity Server is the most complete OAuth and OpenID Connect server, and we enjoy the trust of large organizations in most industries, including financial services, telecom, retail, gaming, energy, and government services across many countries.
Share
Main office address
Sankt Göransgatan 66
112 33 Stockholm
Sweden
Key Products / Services / Sectors (USPs)
Identity Management for APIs, apps and websites
Our product The Curity Identity Server brings identity and API security together for robust authentication and authorization. We offer scalable customer identity and access management (CIAM) solutions that accelerate digital transformation, enable growth, and drive customer loyalty
Key product features:
Custom Authentication without code.
· Create easy login experiences, ensure secure access to digital services. and build brand loyalty
Centralized identity management
· Build consistent and secure user journeys
Control API Access with Identity
· Leverage the OAuth and OpenID Connect standards for distributed authorization and secure access.
Cloud native, deploy anywhere
· Run on your preferred infrastructure, in multiple cloud environments, in your cloud, no cloud or any cloud.
Straightforward, predictable pricing plans.
· Our flat annual subscription model scales as your business grows. No matter how many users your digital services have, the cost remains the same.
Outstanding support
· Dedicated slack channel.
· Professional services offer architectural planning and implementation support.
Services
Supports eID
Yes
No
Area of focus
Consumers
Internal services (enterprise)
Identity provisioning (IdP)
As-a-Platform
API
As-a-Service
Wallet/SDK
Hub
On-board RPs
Offer translation of protocols
Handles federation
Integrate RPs/IDPs/Wallets
Can offer consent capture if required
Attribute brokerage
Can capture self-asserted
Can verify self-asserted
Can integrate with third parties (eg Open Banking)
Supports verified claims (VCs)
Verification services/support
Not supported
N/A
Yes – third party verifiers used (including Open Banking)
Yes – In-house verification service
Authentication
Password/username
Multiple factors (MFA)
Biometric
FIDO
Mobile device
Other
Data store functionality
Attribute storage
Attribute sharing
Configurable for specific sectors (e.g. health)
Use decentralised stores (eg Wallets or online)
Can offer consent capture/handling
Account management for users
Yes
No
On request
Account recovery
Self-service
Help desk
Key management required by user
Channel support
Omni-channel
Web
Mobile
Digital assistant
Wallet
Other
Protocol support
SAML 2.0
OIDC
Oauth
UMA
DID (decentralised identifiers)
Third party capability
External
Internal
Other
Other
Risk-based authentication
Anti-fraud support
Data minimisation support
Consent management
Variable registration (multi-user journey support)
Support for accessibility
Logging and audit
Billing system
User Journeys
Self-service
Offline options, incl. F2F
Upgrade paths to increase assurance levels over time
Creation of delegated accounts
Rules
To modify system behaviour
For risk-based authentication
To use events to drive transactions
To manage user journeys, including verification
To handle LOA upgrades/downgrades
API available
Yes
No
Wallet-based systems
Wallet available
SDK available
Decentralised
Handle payments
Handle identity document’s (eg drivers license)
Handle health information (eg vaccine certificates)
Other
Testimonials
The depth of the product is extremely valuable to us. We can leverage the advanced features and focus on making ourselves market leaders, which we couldn’t do with the other products in the market.
Rihards Skuja, If Insurance
With Curity we were able to evolve our identity infrastructure, to integrate any mobile, web or single-page applications as well as microservices with modern industry standards like OAuth 2.0 and OpenID Connect.
Anu Shahi, Shell Energy
Curity’s flexibility and powerful extension options allow us to integrate custom applications and implement more sophisticated patterns and workflows for authentication and authorization without leaving the ecosytem of the IAM System.
dm Tech