Curity Identity Server

What it does

The Curity Identity Server is a Customer Identity and Access Management (CIAM) and access management platform built around token issuance rather than a login portal. It consolidates authentication, federation, token services, API access control, and user management into software the buyer deploys and operates. Its distinguishing mechanism is Token Intelligence: a Token Designer that shapes each token's scopes and claims dynamically from identity, context, policy, and risk, turning every API call into a scoped, auditable access decision.

How it works

Self-hosted on Linux, macOS, Docker, or Kubernetes with Helm charts, the platform exposes OAuth 2.0, OpenID Connect, Financial-grade API (FAPI) 2.0, CIBA, PAR, and SCIM 2.0 endpoints. Journey orchestration chains authentication factors in any order across browser and native apps, and the Hypermedia Authentication API keeps mobile flows server-controlled so passkeys and multifactor authentication changes ship without an App Store redeployment. Token Exchange translates credentials across APIs and external identity providers, sender-constrained tokens block replay, and Phantom Token keeps token data private to internal APIs. Access Intelligence issues ephemeral, dual-context tokens for AI agents acting on a user's behalf.

Credentials and traction

SOC 2 Type II and ISO 27001 certified, with OpenID Foundation conformance certification for Financial-grade API (FAPI) profiles, including the Kingdom of Saudi Arabia Open Banking profile certified in 2024. Production deployments span financial services, telecom, healthcare, government, and retail, among them ICA Gruppen, Santander, Skandia, Tele2, Volvo Finans, E.ON, PagerDuty, and Scandic Hotels. The platform targets organizations that must keep identity data and login availability under their own control across multiple regulated markets.