SECURIX Developed Product

CIAM Starter Package

A standardized entry into customer identity that centralizes registration, login, MFA and account recovery across your customer-facing applications, building a secure baseline you can expand over time.

Solution overview

The CIAM Starter Package establishes a centralized identity foundation for customers, partners and other external users. The Auth0-based implementation uses standard capabilities for registration, login, authentication, account recovery and MFA, with integration of up to five customer-facing applications. Your applications share common identity capabilities instead of maintaining separate authentication implementations. The defined initial scope provides a foundation you can extend as your digital services and CIAM requirements develop.

Your business needs

Bring customer identity together across your applications

Separate authentication implementations

Individual applications maintain their own identity stores and authentication logic. Development teams repeat integration and maintenance work whenever a new digital service is introduced.

Inconsistent customer experiences

Registration, login and account recovery differ between applications. Customers and partners encounter different identity flows across your digital services.

Uneven security controls

Authentication controls and MFA vary between applications. Without centralized logging, security teams have limited visibility into authentication activity.

Who this is for

A shared identity foundation for your digital services

For medium and large organizations operating customer portals, partner applications or other external digital services. The package supports B2C, B2B and mixed external identity use cases, using standard capabilities within a defined initial scope.

CIO / CISO / CTO

A standardized approach to introducing CIAM, with a defined application scope and clear boundaries for custom development.

Digital Product / Application Owners

Shared registration, login and recovery capabilities that support consistent identity experiences across digital services.

Development / IAM / Platform Teams

Centralized identity and standards-based application integration, reducing duplicated authentication development and maintenance.

Our deliverables

A production-ready baseline for customer identity

The Auth0-based package establishes the essential CIAM capabilities for your agreed applications. It uses standard functionality, with additional requirements handled through separately agreed scope.

  • Platform and environmentsAuth0 tenant setup with development, test and production environments.
  • Centralized customer identityAn external identity store for customers, partners and third-party users, with standard identity attributes.
  • Authentication and federationOAuth 2.0 and OpenID Connect, optional supported SAML 2.0, and supported social and enterprise identity providers for external and B2B use cases.
  • Registration and loginUser self-registration, standard login, email account verification, password reset and account recovery through Auth0 Universal Login.
  • Multi-factor authenticationAuth0 standard MFA, configured according to the agreed policy. MFA can be applied globally or selectively within standard capabilities.
  • Application integrationIntegration of up to five customer-facing applications, including application registration, authentication-flow configuration, token issuance and validation, standard scopes and standard claims.
  • Logging and auditabilityAuth0 standard logging for authentication, security-relevant and audit-relevant platform events.
  • Testing and go-liveSECURIX unit testing and validation of authentication, registration and application-integration flows, followed by initial production-deployment support and limited hypercare for standard CIAM functionality.

  • Workforce identity and HR integration
  • Custom development and identity flows
  • Advanced branding and UI/UX
  • Fine-grained authorization
  • Migration and complex architectures
  • Non-standard integrations
  • Extended testing and ongoing operations

How we deliver

From requirements to production go-live

  1. We define the initial CIAM scope, application integrations and standard identity flows, taking technical prerequisites and customer responsibilities into account.

  2. We establish the Auth0 environments and identity store and configure standard registration, login, recovery, federation and MFA capabilities within the agreed scope.

  3. We integrate the agreed applications using supported protocols and validate authentication, registration and application-integration flows.

  4. We support the initial production deployment and provide limited hypercare for standard CIAM functionality.

A standard implementation is expected to take approximately 15 to 16 weeks, subject to the agreed scope, technical prerequisites, stakeholder availability and customer responsibilities.

Auth0 baseline

Standard identity capabilities for your first applications

The Auth0 baseline centralizes customer identity and connects up to five customer-facing applications through supported authentication protocols. Standard capabilities establish the initial foundation for later extensions.

External users

Customers, partners and third-party users managed in a centralized identity store.

Supported protocols

OAuth 2.0 and OpenID Connect, with supported SAML 2.0 available as an option.

Standard identity flows

Registration, login, email verification, password reset, account recovery and policy-based MFA.

Further development

Additional applications, identity-provider federation, advanced authentication, governance and authorization requirements can be addressed through separately agreed scope.

Technology partners

Technology partners for your CIAM implementation

Frequently asked questions

Before your implementation begins

Your initial applications need to be technically ready for integration and support the agreed authentication protocols. Technical stakeholders must be available, privacy and consent decisions need to be made, and your team needs capacity for timely decisions and customer testing.

Migration of existing users, passwords, credentials and historical identity data is outside the standard package. Custom authentication journeys, advanced branding and application-specific identity logic also require separately agreed scope.

The package includes integration of up to five customer-facing applications. This covers application registration, authentication-flow configuration, token issuance and validation, standard scopes and standard claims.

The package includes initial production-deployment support and limited hypercare for standard CIAM functionality. Ongoing operation, SLA support, additional applications and further development are agreed separately.

Contact us

Let’s discuss your next step

Tell us about your customer identity priorities. Together, we’ll clarify the scope and how the Starter Package can support your digital services.

Silvio Müller

Head of Identity Security

Talk to Silvio