The CIAM Graveyard: Every Dead Identity Vendor and What Killed Them

This article surveys a ‘CIAM graveyard’ of identity vendors that were acquired or failed, identifies a consistent pattern (strategic acquisition, quiet neglect, then an EOL announcement), lists historical examples and warning signs, and provides contractual and architectural recommendations (exportable credentials, change-of-control clauses, minimum wind-down periods, portable protocols, and preference for independent or self-hosted vendors) to reduce migration risk.