Thales Customer Identity and Access Management

The OneWelcome Identity Platform is the core of Thales's Customer IAM line - a modular, API-first platform that manages authentication, single sign-on, and identity data for B2C, B2B, and gig-worker users from one place, rather than stitching together separate login, consent, and fraud tools for each audience.

Organizations pick the Identity Apps they need - MFA, risk-based authentication, consent management, delegated user management - and combine them on the same core platform, so adding a capability later means turning on a module, not integrating a new vendor.

Handles the first moment a new customer meets your brand: identity verification, KYC checks, and risk scoring designed to catch synthetic identities and deepfake-based fraud, which OneWelcome's own materials note have become cheaper and easier to produce than ever.

Progressive profiling means a new user only provides what is needed to get started - the rest of the profile is filled in over subsequent visits, rather than asking for everything up front before an account even exists.

Built for the B2B and extended-enterprise side of customer identity: giving a partner, supplier, or distributor administrator the ability to manage their own users - inviting colleagues, adjusting access, deactivating accounts - without every change going through your own IT team.

One solution covers customer, supplier, and gig-worker identities in the same B2B relationship, so a partner with dozens of users on the other side does not turn into dozens of individual support tickets.

Moves access-control logic out of individual applications and into a centralized policy engine - so a change to who can see or do what is made once, in one place, instead of being redeployed across every application that enforces its own rules.

Policies are fine-grained and attribute-based rather than fixed roles, so access can depend on the combination of user, resource, and context that actually matters for a given decision, not just a role label assigned at account creation.

Puts data-privacy choices directly in front of the user at the moments that matter - registration, profile updates, marketing opt-ins - and keeps a full record of what was consented to and when, supporting GDPR and CCPA/CPRA obligations without manual tracking.

Because consent state lives inside the same identity platform handling login and profile data, a preference change takes effect everywhere at once, rather than needing to be synced across a separate consent tool and the systems that actually use that data.