Monex Subsidiary Coincheck Deploys Authlete's IdP Engine Ahead of 'Crypto as a Service' Push

Share
Monex Subsidiary Coincheck Deploys Authlete's IdP Engine Ahead of 'Crypto as a Service' Push

Japanese cryptocurrency exchange operator Coincheck, Inc. has integrated API authorization engine Authlete to overhaul its identity provider (IdP) infrastructure. Launched in September 2026, the updated framework enables financial-grade security for the exchange's new trading product, Coincheck Leverage, while laying the groundwork for broader third-party API integrations.

Coincheck—a subsidiary of Tokyo Stock Exchange Prime-listed Monex Group and Nasdaq-listed Coincheck Group—sought to strengthen its security posture to support revenue diversification and new service rollouts. Rather than adopting a fully managed SaaS platform or developing an in-house system from scratch, the company selected Authlete's API-first authorization architecture.

By offloading complex OAuth 2.0 and OpenID Connect (OIDC) protocol processing to Authlete, Coincheck constructed its custom IdP within six months. The implementation reuses Coincheck’s existing user database and authentication systems—including passkey support—while ensuring full compliance with the FAPI 2.0 (Financial-grade API) standard. It also incorporates advanced authorization protocols such as PKCE, PAR, and DPoP to protect mobile app communications.

The deployment serves as the core security layer connecting the Coincheck smartphone application to backend services for Coincheck Leverage. Looking ahead, Coincheck plans to leverage the FAPI 2.0-compliant infrastructure to power its upcoming "Crypto as a Service" (CaaS) initiative, enabling secure API integration with institutional partners and third-party businesses.


Authlete Tapped by MS&AD Insurers to Overhaul Digital Identity Infrastructure
In a move to fortify digital security and streamline customer experience, two MS&AD Insurance Group subsidiaries—Mitsui Sumitomo Insurance and Aioi Nissay Dowa Insurance—have adopted the Authlete backend service to implement OpenID Connect (OIDC) across their customer platforms. The deployment, executed by the group’s IT arm MS&

Read more