June 1, 2021 By Martijn Loderus 4 min read

Ever been on a website, ready to check out, only to encounter multiple fields to fill at once? Did the process frustrate you and make you close the page without completing your transaction? Such experiences and the resulting loss of customers could be happening to your business. That’s why you need better consumer identity and access management (CIAM).

Unlike traditional identity and access management (IAM), CIAM enables unknown users to self-register so that their identities are known by your organization. For CIAM to work well, consumers need to feel encouraged and secure in providing their information from the outset. This atmosphere is why a modular approach to CIAM makes sense for you to adopt. Let’s take a look at four building blocks, starting with Capture, followed by Engage, Manage and Admin. With them, your organization gets a manageable, repeatable mechanism to work with the consumer identities you need. In each part of the upcoming blog series, we’ll focus on one of those building blocks.

What Capture Means in CIAM Strategy

Consumers expect a frictionless form coupled with privacy. You want to provide those elements while obtaining their personally identifiable information (PII) and consent during their initial contact. The Capture building block allows you to achieve all these goals.

During the Capture sequence of your CIAM strategy, you establish and gain user trust as you collect their basic attributes in your first external, consumer-facing interaction. Often, this item is a form template you host in relation to your use case. You offer easy initial signup so that consumers feel comfortable submitting more PII and starting a workflow experience with you. To achieve this goal, begin by creating a CIAM registration form that sets up a strong relationship with your consumers.

Learn more on CIAM

How Capture Works

You should ask the following questions regarding your registration form in the CIAM Capture building block:

  • What use case are you supporting? Is the customer purchasing products or signing up for events?
  • What’s the look and feel you want? What sort of design and branding works best for your users?
  • Should onboarding be the same for laptop, tablet and mobile users?
  • What’s the registration experience? How can you have as little friction as possible for users during the process?
  • What attributes are you looking for? What information is essential for your users’ journey?

For the latter questions, you want to collect the least amount of data needed; often only a first and last name and email address. By using CIAM to give your users the convenience of this passwordless authentication, you inspire them to stay active with your website rather than abandon the setup due to a lengthy registration process. They appreciate how simple it is to sign up with minimal data requirements at first.

Also, make sure your consumers understand the reasons for providing their data and have a section on the form showing they have given their consent.

Why Capture Matters to You

By not asking for more detail, or asking the same questions twice, the Capture building block process supports progressive profiling. Through the use of application programming interfaces (APIs), progressive profiling allows you to request more PII as the consumer journey advances. As a result, users’ profiles increase the more they deal with you. You then allow and encourage customers to build their own accounts and central profiles.

These profiles work well if you have multiple sub-brands or other services for consumers. Users sign up once and maintain their account to access all you have to offer on your website. This process is easy for consumers and allows convenient tracking for you to obtain better insights about customer habits.

At the same time, Capture allows you to employ such options like identity proofing and password checking against denial lists to improve security during transactions. These elements can help make sure that these are real consumers signing up for your events, services and products.

What Do You Want From Registration?

In addition, the Capture building block of the CIAM setup allows you to choose the kind of form that best meets your needs. A traditional registration allows you to validate email addresses, perform fraud checks, establish rules about password lengths and character types and include other form requirements.

For a social registration, you can get access to viable social identity provider sources to establish a social login. A social login uses information from a social media service, such as LinkedIn, to sign in to your website instead of having users create a new login account.

If desired, you can capture consent on tracking, analytics, processing and more with just a checkbox on the form. You can even adjust the user interface and experience in CIAM by adding widgets and developer-created solutions. Whatever you feel is essential to capture customers’ attention and PII at the start, CIAM solutions help you stay in control to make that decision.

What’s Next for Your CIAM Rollout?

Capture is the first step to ensure all requirements get aligned throughout the life cycle of consumer engagement in the CIAM architecture. By using Capture, your users can establish a single sign-on for the rest of the CIAM building blocks. From there, you’ll have a seamless flow across multiple devices as you share context across digital touch points. Meanwhile, you get a central profile you can use to upsell or promote more events and communicate with your customers more.

Your ultimate goal is to capture, nurture and grow customers through personalized experiences that offer them privacy, control and transparency. The possibilities are endless for you, as long as you properly add the other three building blocks: Engage, Manage and Admin. We’ll discuss those building blocks in more detail in future blogs.

Register to read more about the benefits of CIAM.

More from Banking & Finance

Virtual credit card fraud: An old scam reinvented

3 min read - In today's rapidly evolving financial landscape, as banks continue to broaden their range of services and embrace innovative technologies, they find themselves at the forefront of a dual-edged sword. While these advancements promise greater convenience and accessibility for customers, they also inadvertently expose the financial industry to an ever-shifting spectrum of emerging fraud trends. This delicate balance between new offerings and security controls is a key part of the modern banking challenges. In this blog, we explore such an example.…

Cost of a data breach 2023: Financial industry impacts

3 min read - According to the IBM Cost of a Data Breach Report 2023, the global average cost of a data breach in 2023 was $4.45 million, 15% more than in 2020. In response, 51% of organizations plan to increase cybersecurity spending this year. For the financial industry, however, global statistics don’t tell the whole story. Finance firms lose approximately $5.9 million per data breach, 28% higher than the global average. In addition, evolving regulatory concerns play a role in how financial companies…

Gozi strikes again, targeting banks, cryptocurrency and more

3 min read - In the world of cybercrime, malware plays a prominent role. One such malware, Gozi, emerged in 2006 as Gozi CRM, also known as CRM or Papras. Initially offered as a crime-as-a-service (CaaS) platform called 76Service, Gozi quickly gained notoriety for its advanced capabilities. Over time, Gozi underwent a significant transformation and became associated with other malware strains, such as Ursnif (Snifula) and Vawtrak/Neverquest. Now, in a recent campaign, Gozi has set its sights on banks, financial services and cryptocurrency platforms,…

The rise of malicious Chrome extensions targeting Latin America

9 min read - This post was made possible through the research contributions provided by Amir Gendler and Michael  Gal. In its latest research, IBM Security Lab has observed a noticeable increase in campaigns related to malicious Chrome extensions, targeting  Latin America with a focus on financial institutions, booking sites, and instant messaging. This trend is particularly concerning considering Chrome is one of the most widely used web browsers globally, with a market share of over 80% using the Chromium engine. As such, malicious…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today