Original Article Identity and Access Management (IAM) has been a pivotal topic on the internet for the last couple of decades, enabling users to be on-boarded in systems ranging from e-commerce to social media and e-governance. Traditionally, IAM has had to navigate tradeoffs between security, centralization and privacy, often favoring centralization at the expense of privacy and, to a degree, security. For example, they have been known to create massive centralized user databases that are misused for advertisement targeting, present an attractive target for hackers and create a huge liability in case of accidental data leaks.