OneLogin Customer Identity review
Branded customer login with SSO, social and passwordless options, plus policy-based MFA in CIAM Plus.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
OneLogin Customer Identity is a cloud CIAM product for organizations building customer-facing applications and services. It provides web and API support for customer authentication, including SAML and OIDC single sign-on, social login and registration, passwordless email and SMS, and APIs for customizing authentication. Its stated fit is mid-market and enterprise teams that need branded customer login and control over authentication policies, rather than a broad customer-profile or general-purpose platform.
The plan distinction shapes what customers can do. CIAM Core includes custom branding, social login and registration, passwordless email/SMS, OIDC and SAML authentication, cloud directory, and one directory integration. CIAM Plus includes Core and adds multi-factor authentication, additional passwordless factors, custom domain, advanced directory, and delegated administration. The product also describes SmartFactor Authentication with configurable risk thresholds and policy-based MFA, as well as multiple brands, custom login pages, and granular privileges in Plus. According to OneLogin's pricing page, CIAM Plus is call for pricing; CIAM pricing is not publicly stated, so teams should contact sales to compare costs. Workforce plan prices on the same page do not apply to CIAM.
Its strongest case is authentication depth within a branded login experience: teams can combine SSO, social or passwordless entry with password reset, a dynamic password deny list, and risk-aware authentication requirements. Integrations include OneLogin App Catalog, Google, Duo, Symantec, and Yubikey, while APIs support integration into customer applications. The trade-off is that CIAM Core is limited to a single directory integration, and several administrative and branding capabilities sit in Plus. Choose it when customer authentication, directory connectivity, and branded policy controls are the priority; teams seeking broader verified customer-profile capabilities or extensive platform breadth should compare alternatives.
OneLogin Customer Identity pros and cons
- Where it wins
- Supports customer SSO with SAML and OIDC, plus social login and registration
- Offers passwordless email and SMS authentication and password reset
- CIAM Plus adds policy-based MFA, risk thresholds and delegated administration
- Where it doesn't
- CIAM pricing requires contacting sales
- CIAM Core has only a single directory integration
- Multiple brands, custom domains and delegated administration require CIAM Plus
OneLogin Customer Identity fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update