Oracle Access Manager Reviews

Our primary use case involves managing internal applications and providing end-to-end support based on Single Sign-On (SSO) authentication. We handle authentication and authorization by allowing access users to log in with credentials and authenticate against our systems. We support a wide range of internal applications with a focus on secure access.

Access Manager allows us to efficiently manage a broad spectrum of applications while ensuring secure, single-page application access. Its ability to consolidate applications on a single interface streamlines operations significantly.

I have used the tool for my purposes and done a PoC. My company also uses this tool when we deal with customer-facing scenarios. With the tool, we integrate all three authentication mechanisms, including SAML, OIDC, and WebGate-based authentication.

The most valuable feature of the solution is OIDC, especially if you see in Oracle Access Manager 11g, where we have everything in the front-end, but if we upgrade to, right, Oracle Database 12c, we have all the APIs from Postman which are user-friendly, and we can access.

Our clients use Oracle Access Manager primarily for single sign-on, multi-factor authentication, and authorization.

The most important functions of Oracle Access Manager are single sign-on and its integration capability with different applications. I also have experience with its audit trail capability, which I find valuable. Oracle Access Manager audits all events in the system, including authentication, authorization, password resets, and user behavior. The benefits it provides to clients include enhanced security for users and applications, improved user experience through single sign-on, and scalability.

As for integration, Oracle Access Manager has good integration capabilities. It supports agent-based authentication and standard protocols like OAuth, OpenID, and FEM. The integration complexity ranges from simple to medium, depending on the application.

We use the solution for single sign-on and multi-factor authentication.

My organization decided to use the product because it can handle multiple requests. It does not lag and has multiple features to connect with multiple applications. We do not have to involve any third-party vendors.

We use it as a single sign-on solution for the Ministry of Economic Affairs in the Netherlands.

Its most valuable feature is implementing federated authentication since we use a federation with other servers.

We primarily use the solution for accessing other applications, meaning it gives a single sign-on and multifactor authentication. That is the main use case. I use it with Oracle Identity Governance. I use it if I need to request permissions for certain business applications. 

The MFA is the most valuable aspect. That is the one feature I use every time. Security-wise, it's great. It recognizes the risk factor. Based on the way I log in, if I enter my password several times, failure is required for additional authentication. From a security perspective, it's great.

The solution is stable. 

It's quite scalable.

We have multiple applications that require logins. If when a user is signing on for the first time, they can go to the Oracle Asset Manager's main page where they will need to provide a user ID and password. Then, the corresponding user ID and password would be there and the user's page will be sent a token. If they need to log into other applications, the registry token will be used and the user won't need to log in at that time. So by doing that, we are providing a secure and simple user experience.

The solution has the ability to allow users to geo sign-on. Geo sign-on is when somebody is logging in from a Windows laptop, after logging in the first screen when a user opens the laptop, they're signed in across the board. So, once they have logged into a window and if they are opening another application, they don't need to sign onto it individually.