Airlock IAM is a centralized customer identity and access management (cIAM) platform designed to orchestrate authentication, authorization, and access permissions for applications, APIs, and data. It operates as a central identity provider and identity router, decoupling access management from individual applications to facilitate single sign-on (SSO) and identity federation. The system manages the user lifecycle, from registration and login flows to self-service capabilities. It enforces access controls via policies such as role-based (RBAC) and attribute-based (ABAC), connects to enterprise directories, and handles session management, internal token validation, API keys, and API usage plans.
To support zero-trust security architectures, the platform employs a continuous adaptive trust model that enforces security levels according to application risk. It utilizes context-dependent, risk-based, and step-up authentication methods, with native support for multi-factor authentication, FIDO2 passkeys, and electronic identities (E-ID). Built for cloud-native environments, it offers horizontal scalability and Kubernetes support. The system operates on OAuth 2.0 and OpenID Connect (OIDC) protocols for token management, including token exchange and backchannel logout. It provides a YAML-based format for configuration automation and REST APIs for integration.
