AssureAssure
Identity platforms and CIAM

Make your identity platform conversational.

Keep the identity platform you already run. Add a verified customer channel and a real human approval to the moments that matter most.

How does Assure work with an existing identity provider?

It is designed to be additive, not a replacement. Your IdP or CIAM platform still owns accounts, sessions and access decisions; Assure is intended to handle the customer-facing step — authenticate the person in a verified channel, show them the specific action, capture approve or decline — and return that outcome over standard interfaces. None of these capabilities are live today.

Reference architecture

Additive by design.

One request out, one result back. Your platform remains the system of record for identity.

Your IdP / CIAM
Accounts, sessions, access policy
Assure
Identity, intent, authorization
Verified channel
Messaging app the customer trusts
Human approval
Approve or decline
Signal back
Outcome returned to your platform
Illustration — reference architecture. Not a live integration with any named platform.
Where it fits

The flows that hurt most.

None of these are live today. They are the places teams tell us codes fail them.

Step-up inside a login flow

When risk rises mid-session, send the customer an approval request in a channel they recognise instead of another anonymous code.

Account recovery assurance

Recovery is where most account takeovers start. A verified channel and an explicit approval raise the bar without adding a call centre step.

High-risk change confirmation

Bind the approval to the specific change — new device, new payee, new email — so you can show what the customer agreed to.

Contact-centre identity

Verify the person on the phone or in chat without reading secrets aloud.

Reducing SMS OTP spend

Every authentication handled by a passkey or an in-app approval is a message you do not pay to send.

Consent and preference capture

Ask for permission for a named action and keep the customer's answer with it.

Standards-based compatibility

Built on interfaces you already run.

Compatibility comes from standards, not from a private agreement with any vendor.

OAuth 2.0 and OpenID Connect

The vocabulary identity platforms already speak, for handing a challenge out and getting a result back.

REST and webhooks

Request an authentication or an authorization, then receive the outcome as an event.

FIDO2 and WebAuthn

The basis for passkeys, so a phishing-resistant factor does not need a proprietary format.

NIST Digital Identity Guidelines

Used to inform how we think about assurance levels and recovery. No certification is claimed.

No certification is claimed. Identity platform names, where used on this site, are ecosystem context only — they are not partners, integrations or endorsements, and no shipping integration exists today.

Talk to us

Run an identity platform? Let's compare notes.

Tell us which flows cost you the most in codes, calls and abandonment. A person will reply by email.

What are you interested in? (optional)

We use your details only to respond to this request. See our privacy policy.

Frequently asked.

Stronger proof. Fewer codes.

Authentication for today. Authorization for what's next.