Vendor lock-in is a situation where switching away from a CIAM vendor becomes difficult or costly, for example, when a vendor withholds details like password hashing algorithms that a customer needs to migrate their accounts elsewhere.
Frequently asked questions
How does password hashing create vendor lock-in?
If a vendor won't disclose the hashing algorithm and parameters it uses, an organization can't securely migrate customer passwords to a new system, forcing a disruptive password reset for every customer instead.
How can an organization protect itself against this kind of lock-in?
By asking vendors about migration policies and exit support before signing a contract, and by negotiating contractual terms that guarantee hashing details and migration support if the contract ends.
.avif)