Identity Orchestration
Identity orchestration is the practice of running login, registration, verification and access journeys as configurable flows that call several identity services (identity providers, MFA, fraud signals, identity proofing) from one layer outside the application, so the journey can change without a code release. An identity orchestration platform is the product that runs those flows.
The mechanics are simple: a flow is a sequence of steps, each step calls a connector to a service, and decision logic between steps picks the next path. Ping's documentation describes PingOne DaVinci as "an orchestration platform that lets you create flows to guide users through IAM activities," and lets one application split traffic between flows for A/B testing. The same pattern drives IdP migrations: the orchestration layer routes each user to the old or new provider until cutover, and Rubrik now uses Strata's orchestration, acquired in June 2026, to fail authentication over to a secondary IdP during an outage.
It matters because most organizations run more than one identity system. The trade-off is a new tier-zero dependency in the login path: if the orchestration layer is down or misconfigured, every flow behind it is too.
See also: identity orchestration tools compared, CIAM journey orchestration, what is identity fabric, identity provider, identity fabric
Related on Start with Identity
- GlossaryConsent Management
Consent management is the capture, storage and enforcement of a user's consent to specific data processing and communications, with a record of what they were s
- GlossaryDirectory Service
A directory service is the system that stores an organization's identities and their attributes (users, groups, devices, service accounts) in one queryable data
- GlossaryIAM
IAM stands for identity and access management: the policies, processes and technology an organization uses to make sure the right identities (people and machine
- BlogAmazon says more than 500 million customers have turned on passkeys
Amazon updated its passkey announcement on October 20 to say more than 500 million customers have enabled passkeys, which it says sign in about six times faster
- PodcastKuppingerCole Analyst Chat
Weekly conversations between KuppingerCole analysts on identity architecture, governance, AI agents, and the market. Over 300 episodes since 2020.
- PodcastOkta
Okta's 2023 interview series for product managers and marketers on using customer identity to build better experiences. One season, 14 episodes.