Oracle Identity Governance Reviews

One of the most visible improvements would be the fast turn around for getting users access to the system on the day they start work and getting users out of the environment on the last day of work.

The most important features that have impacted our environment recently are the Single Sign-On solution, role based provisioning, and the automated provisioning of accounts to target systems. This is because we operate in a large environment with huge user turnover. Lots of applications are manually provisioning and deprovisioning, which can be quite daunting when done manually.

The development and the administration side could be a lot more intuitive and easier to use than it currently is, in terms of functionality and what it tries to achieve as a Single Sign-On entity for an enterprise environment. However, on the development and administration side, the learning curve is steep and quite challenging to master.

We don’t really have any issues with the platforms stability as it is up and running with minimal downtime that is caused by the OIM itself. I would rate the platform as very stable.

At the moment, we have not had any issues with the product’s scalability.

The technical support from the product owners could be a lot better. Their default mechanism seems to be referring you to documentation, which most times does not solve your issues immediately. I believe that when you reach out to technical support for help, you want someone who can help address your needs immediately, not telling you how to investigate the issues yourself.

This is the first implementation of a Single Sign-On solution.

I was not here for the initial setup, but from what I have seen so far, it seemed pretty complex.

Document, Document, and Document. The product is very vast and complex and it can get pretty large in a short amount time. It pays to document every thing you do. Other than that, I think it’s a great product and it has a lot of potential.

It has improved the way my organization functions through customer implemented OIM and OIA. It keeps us compliant and away from risks and federal penalties.

I have found the OIM Connector framework, based on ICF, to be the most valuable feature.

OIA needs to improve its governance features.

I did not encounter any issues with stability.

I did not encounter any issues with scalability.

Oracle's support is not as good as that of other vendors.

We started with OIG.

The initial setup was complex, due to suite level integration.

Oracle licenses are expensive. I suggest making pricing and licensing decisions that align with architectural requirements and the project's budget.

I evaluated CA and RSA before making my decision.

Go with Oracle if you expect more customization features from the product.

• Centralized life cycle management of identities: the centralized view of people requesting access to provisioning to targets and governing the access from one place
• Periodic certifications of access for compliance

The organizational benefit is increased efficiency and simplicity so that we can manage the identify lifecycle faster and better, and so we can govern the access from a central place and make it easier.

Oracle is probably already working to make the overall user experience lighter, including the UI.

I have been working with all versions over the last seven years.

We have not encountered any deployment issues; it's manageable and easy.

The current version is stable. Past versions have stability issues.

There are some scalability issues with every product; most of them are related to load and performance but these can be handled and they are improving day by day.

Technical support is good, depending upon the severity and relationship with Oracle; but overall, you will get an answer.

Technical support is 3.0/5.

It's flexible enough but requires enough technical knowledge to set up.

Rich authorization engine for delegated admin
Robust workflow capability with BPML engine
Extensive connector support
Diagnostics are pretty good

Used it for external user registration, password & profile management

Attempted to model a hierarchical role model but the OIM Access Policies, which map roles to entitlements, don't provision entitlements from inherited roles. This is a flawed design, IMO, limiting you to a flat role model.

A lot of Dependencies - Oracle database, WebLogic, SOA
A lot of things still have to be done in Design Console, which still has a 90's UI.
No REST interface for Identity as a Service that I'm aware of
Doesn't hide its complexity

Expensive
Weak support team
Built on, and relies on ADF for extensibility

3+ years

Poor

Hit and miss

If you're anticipating a lot of growth, you may be able to keep costs more predictable with CPU-based licensing.

Classic enterprise provisioning system provides self-service, resource attestation, password synch, delegated admin. My use is for external user registration system into OID for target system.

The most valuable features are the comprehensiveness; the whole identity lifecycle management; the centralized view of people requesting access to provisioning, to SLD, and to access review; basically, the whole suite.

The features are there. Oracle has always had a good vision about where the product is going.

The greatest benefit is increased efficiency so we can manage the identify lifecycle faster and better and so we can govern the access from a central place and make it easier.

I would like them to focus on profile-based provisioning and make what we call the birthright access management. We need to have an easier way for people to find out the birthright rules and based on the birthright roles, the people get access they need to get what they want done.

By profile, I'm referring to job profile. Take engineering as example. To do their jobs, all engineers need access to some applications and systems. There are typically multiple engineering teams, e.g. the access needed by network engineering team can be quite different from security engineering, corporate software engineering, and customer facing software engineering. However for each of these engineering teams, people tends to have the same job profile (title, reporting to, department, etc.) and they may require the same access rights to a common set of apps / systems.

I am imagining that users could select security engineering and then a number of access requests could be generated for a list of apps / systems that a typical security engineer needs access to.

But first they need to work out the product stability issues and make it easier to upgrade, support, and troubleshoot; those kinds of things.

Sometimes, it does not meet our expectations in terms of stability. I would give it a 3.5/5 for stability.

Given that it's an OEM product, the scalability is not really a critical factor for us. People can wait for minutes, hours, even days to get access granted. For OIM, it's not really a high criteria.

Technical support is pretty good. The only comment is that it depends on which company you come from. Some companies have great relationships with Oracle's product management, so they can get access to the best resources faster than others. We happen to be one of the customers that have a close relationship with Oracle, so no complaints.

We did not really have a previous solution. OIM has been here for years. Many, many years ago, we had a homegrown solution, but it’s no longer there. For the several past years, I know it's just been OIM.

Initial setup is not a part of my job function.

I just joined, so there's no initiative to reevaluate that part.

I would certainly short list OIM on a list of candidates along with some others in the market. With Gartner publishing every year, you have a good review for all the products on the market. For me, Oracle is at least top 5.

The features are there. Oracle has always had a good vision about where the product is going.

A vendor must have a quality product with easy-to-use features. Right now, user experience is a big thing in the market. Many vendors offer similar solutions. Ease-of-use and the quality of that is the main factor for us.

This solution is for single-sign-on. We are trying to extend that feature to include other enterprise applications.

The user-level management has improved when you have this solution in place. It's very difficult for us to manage the user access at the corporate level. It is a 24/7 job and we are global with multiple locations. We have user groups who manage all user access on the global level. That is easier to do with Oracle Identity Management in place.

I would like to see it expand to other applications as well. There are certain non-Oracle applications where the integration might be difficult. It would be good if that integration could be simplified.

The solution is stable.

It is scalable as we expand into other applications. You need to fine-tune in some areas when expanding and maintaining the application.

In this area, I don't see great support. There are a few guys we know in the Oracle support group, so we can escalate a case if they are there. The issue can then be resolved fast. It would be good if more of the team members could catch up to that level.

This installation is straightforward. A lot of documentation is available from the Oracle website. We were able to implement this in-house, without spending too many dollars. I think it is pretty good.

It is a great product. There may be some issues during setup, but once it’s stabilized, it's a perfect product.

It has more for our in-house systems like ERP, Active Directory, and Exchange and the integration of IDM with all those systems. It was very customizable. We do all our customizations in Java.

We have used this product to automate our manual business processes, like onboarding and other processes.

Everybody's been moving onto the cloud, and it's not a cloud-based solution. That is one of the things that is missing. There are competitors that are moving ahead in the market. They have some powerful connectors for cloud applications like Workday. We don’t have any feature for connecting to Workday. It should be a cloud-based solution with connections to cloud applications.

It was pretty stable. With the volume of data that we have at this point, it was stable.

We don't have large volumes of data. From a scaling point of view, we didn’t face any issues.

For a couple of issues, we reached Oracle technical support and we raised issues with them and they were very supportive.

Initial setup was not too complicated: easy to medium.

Oracle Identity Manager’s most valuable feature is that it is a pretty stable product, and it works on a high load. It also has a connector for most of the legacy products, so it connects pretty much smoothly: so provisioning is pretty good with this product.

Oracle Identity Manager helps to organize, control, and maintain the user IDs and user access keys for an organization. It also has an Activity Manager, for handling situations such as an employee leaving the company.

The look and feel could be improved. I have worked with and looked at different products. The look and feel of those were pretty good or better than this product.

This is a stable product, but the look and feel is not that great.

It is pretty good on scalability as well.

Technical support is good. Most of the support is online, and they take their time. It should be a little bit more of an active response, geared to stabilizing the situation and helping clients fix their issues.

We were using something, which was acquired by Oracle and then we migrated to Oracle. We also have a lot of data to process, and Oracle performs well for that.

Considering the market, it is pretty straightforward to set up.

Try the different products and you will feel the difference. It may be a little difficult to go with this product, but it does help developing at a later phase, so there they will get advantage. So if they really want to compare, compare it full-fledged, considering all points, not only the top one or two points; then decide whether it is good.