Oracle Access Manager Reviews

We are using Oracle Access Manager and ForgeRock in different projects. We are using both.

It is basically used to implement Single Sign-On or Multi-Factor Authentication to prevent access from different types of users such as organization users and contractual users. Based on their segregations, we determine how many levels of authentication need to be implemented through MFA, or if we implement SSO for both users.

It has adaptive capabilities. You can use behavioral controls to restrict users from certain periods or regions. This falls under behavioral controls, but Adaptive Behavior uses different terminologies in Access Management. It changes from product to product, but the functionality remains the same.

SSO is easy to implement using Oracle Access Manager. For example, I have used Okta for implementation of SSO, and it is straightforward and pretty easy.

The solution is able to save time and resources for my clients.

There is always room for improvement with emerging technology and emerging threats. Hackers are bypassing MFA and passwords. There is always room for improvement for every product.

This is applicable for every product in Access Management, including Oracle Access Manager, ForgeRock, Okta, and IBM Access Manager. They have to keep their guards up constantly because nowadays with AI, there are different threats emerging. The best thing about Oracle is that they always provide regular packages and security feature updates through their service.

We have been using Oracle Access Manager for almost three or four years.

It is a heavyweight application. The product deployment and installation takes time, and the environment details are complex. ForgeRock is very quick to deploy on Tomcat, but Oracle Access Manager must be deployed on WebLogic, a heavyweight server. You cannot deploy Oracle Access Manager on Tomcat. If an organization has sufficient budget to spend on servers, then it is useful. For organizations that do not want to spend too much money on Oracle Access Manager, maintenance and upgrades take time, whereas with ForgeRock, that is the opposite as fewer resources are required.

Being a heavyweight application, it will take more time for deployment and installation compared to ForgeRock or Okta. Okta is cloud-based, so it does not take much time. ForgeRock on-premise only needs deployment on a Tomcat server, making it less complex as it is a lightweight application.

It is very stable. The organization for which we are providing service has been using it for a very long time.

For flexibility and scalability, there are no issues. It performs well as a heavyweight application and can handle many tasks simultaneously. Scalability is present, and you can set up DR for availability.

They have excellent Oracle support. Based on their feedback, documentation, and support, they are very good. You can always rely on them. They consistently provide support.

Positive

Apart from installation, I do not find anything as a drawback. Installation and deployment take time, but implementation is straightforward and easy, and they have very good support.

It is on-premise currently.

We have partnerships with customers who are using Oracle Access Manager. We are a partner and service provider.

When using the term Fine-Grained, it refers to authorization determining user access. It should be specific, based on specific roles. Fine-Grained means strict access control for specific resources or targeted entitlements or privileges. The terminologies differ from product to product, but in Access Management domain, it means targeted authorization for access to targeted resources.

The solution saves time and resources for clients.

It is competing with other products in the Access Management market, and they have extensive experience in this domain.

For support, I would rate it 10 out of 10.

I rate Oracle Access Manager an 8 out of 10.

Our primary use case involves managing internal applications and providing end-to-end support based on Single Sign-On (SSO) authentication. We handle authentication and authorization by allowing access users to log in with credentials and authenticate against our systems. We support a wide range of internal applications with a focus on secure access.

Access Manager allows us to efficiently manage a broad spectrum of applications while ensuring secure, single-page application access. Its ability to consolidate applications on a single interface streamlines operations significantly.

Access Manager allows us to efficiently manage a broad spectrum of applications while ensuring secure, single-page application access. Its ability to consolidate applications on a single interface streamlines operations significantly. The product is highly secure and reliable, especially in managing user access across various platforms. Multi-factor authentication enhances security by requiring additional verification steps.

To improve Oracle Access Manager, they should consider integrating more policies and enhancing automation, especially in managing server load and cache cleanup. Enhancements in automation would ease management, particularly during unexpected server overloads. Adding these features would significantly improve efficiency and user experience.

I have used Oracle Access Manager for four years.

Although Oracle Access Manager is generally stable, we experienced issues with multi-domain configurations and web agent settings. Occasional overloads have led to node manager servers shutting down, impacting business operations.

Oracle Access Manager is highly scalable, earning a nine out of ten. It can handle numerous applications, and its size efficiency ensures that resource overloads are minimal.

Technical support from Oracle directly is rated seven out of ten. Although helpful, there is room for improvement in providing quick responses during overload situations.

Neutral

I have previously worked with different products, including Azure, Ping Federation, CyberArk, and Okta. Each product offered distinct security features, but Oracle Access Manager provides a comprehensive security approach.

The initial setup of Oracle Access Manager was straightforward once the initial challenges with the Repository Creation Utility (RCU) were resolved. After understanding these challenges, subsequent setups were much easier.

The implementation was managed internally with support from Oracle as needed.

Oracle Access Manager is more expensive than alternatives like Okta and CyberArk. Although it offers robust security, the cost might not justify its features for organizations with fewer applications.

We evaluated Oracle Identity Manager, Ping Federation, Okta, CyberArk, and other security management tools.

For new users, understanding the architecture and process flows is crucial. Ensure you familiarize yourself with server configurations, user credentials management, and the creation of policies. A comprehensive training session for team members dealing with user account management and application protection is essential. 

Overall, I rate Oracle Access Manager nine out of ten for its extensive capabilities.

My main use cases for Oracle Access Manager involve using it as an authentication server integrated with Oracle Internet Directory as LDAP, which contains the user store for authentication.

We have implemented single sign-on through Oracle Access Manager by using session cookies, which significantly contributes to the user experience and access control for our customers.

I find the authentication module, authentication scheme, and security policy most useful in Oracle Access Manager.

The authentication feature enhances security for our customers by allowing us to use the flow and security flow integration with Oracle Access Manager authentication in conjunction with LDAP such as Oracle Internet Directory as a user store, identity store.

For scalability, Oracle Access Manager demonstrates a high level due to high availability and scalability with redundant nodes to load balance across multiple nodes for Oracle Access Manager and Oracle Internet Directory to distribute the load.

Oracle Access Manager is not very suitable or too heavy for cloud-native environments and needs more customization and configuration compared to authorization servers such as Keycloak or WSO2 Identity Server.

I have been working with Oracle Access Manager for many years, approximately 15 years.

The technical part of the setup for Oracle Access Manager is slightly easy, but it does require more customization or deep experience depending on architecture or implementation.

The time for deployment varies depending on the architecture; if it's a complex cluster environment, a full security solution, then it will depend on those factors.

In a cluster environment, it may require one day for deployment, that is, a day for the team.

In my opinion, it is a stable solution, and we could depend on it to be satisfied with its performance.

In terms of scalability and flexibility, we have needed to apply patches in some cases to handle issues or fix problems we have faced with Oracle Access Manager.

I would rate the technical support for Oracle Access Manager a six.

There are not straightforward problems with technical support, but sometimes we need to explain our issues more than once.

We are considered implementers of this solution.

I am currently not exposed to the pricing issue, but I think Oracle Access Manager is more expensive than other products.

I have not dealt with the setup cost concern as we have a team responsible for licensing and other related issues.

We investigated Oracle products compared with WSO2, specifically WSO2 API Manager, to compare the features it provides which differ from Oracle and Identity Server, particularly regarding the key manager for WSO2 compared with Oracle Access Manager as a key manager to integrate with WSO2 API Manager.

I would recommend those planning to use Oracle Access Manager consider lightweight or cloud-native authorization servers such as Keycloak or Okta, especially for developing modern applications such as Microsoft architecture.

I am currently not working with other Oracle solutions such as WebCenter, API Platform, or anything else ODI.

Currently, we work on Oracle products and try to investigate API Management solutions such as WSO2 API Manager.

We have developed our own authorization solution as I do not have experience with the fine-grained authorization capabilities offered by Oracle Access Manager, and we only depend on Oracle Access Manager for authentication.

Our customers use Oracle Access Manager on-premises, not on cloud.

On a scale of 1-10, I rate Oracle Access Manager a 7.

Positive

I have used the tool for my purposes and done a PoC. My company also uses this tool when we deal with customer-facing scenarios. With the tool, we integrate all three authentication mechanisms, including SAML, OIDC, and WebGate-based authentication.

The most valuable feature of the solution is OIDC, especially if you see in Oracle Access Manager 11g, where we have everything in the front-end, but if we upgrade to, right, Oracle Database 12c, we have all the APIs from Postman which are user-friendly, and we can access.

If we can customize the installation and configuration component to less than a GB, that would be really great. Nowadays, you can just deploy the tool with the help of a JAR file on the application server and install it. In Oracle Access Manager, we have a lot of database and repository creation utilities, and then we need to install the infrastructure. We need to install the identity management component, so the process is huge, and if we can customize the process, that would be helpful. I think that would be helpful for other customers. A lot of enterprises need to request for the GB of RAM required and a hard disk compared to other products, where the installations can be done in two GB, and we can also run it in two GB. If someone needs to install and learn Oracle Access Manager, they need to request 60 GB of RAM and a laptop, so I feel that if that can be customized, it would be really helpful for everyone.

The tool has all the features and bug fixes. Right now, I have no idea what the tool needs to add because the legacy system generally supports all the protocols supported by our local access management. A new protocol will be developed or should be developed.

In other products, we can customize on the GUI end, whereas in Oracle, we need to take a backup of the JAR file and then customize it. We need to redeploy the JAR file, and during this process, sometimes the WebLogic admin console will go down, which will impact the process. To avoid this, I think the customization features should be in the tool.

The customization part and the installation and configuration are areas where we can reduce a lot of GBs that need improvement. I think the product can reach a lot of customers where they can play in and play out with the four GB of RAM.

I have been using Oracle Access Manager for ten years. I recommend the tool to our customers. I am just a customer of the tool.

Scalability-wise, I rate the solution a ten out of ten.

I rate the technical support a ten out of ten.

Positive

If you talk about the whole deployment, for some of the customers, we needed six months. For some customers, the deployment took one year or two years. For large organizations like MTN and Jio, it took more than a year and a half to go live because they knew their own customization needs, custom login pages, and OTP pages. Based on the requirements, it takes some time.

The time needed to deploy the tool varies from customer to customer. For one of our customers in India, IDFC Bank, we implemented the tool in six months. In large enterprises like MTN and Jio, it took two years to complete the end-to-end implementation. Everything depends upon their requirements and customization.

The tool is affordable. The charges are usually based on the number of users. Considering what other products charge per user base, I don't see any difference between them and Oracle. The difference in prices from product to product can be 1,000 USD to 2,000 USD.

I have used the tool for two of the topmost organizations in India and South Africa. In India, the tool was used by Reliance Jio and in South Africa for MTN's customers. The user base is very high, like a billion people.

In Oracle Access Manager, we have adaptive access management.

Recently, I have not worked on AI integration with Oracle Access Manager.

I recommend Oracle Access Manager to other organizations. I recommend the tool to small and big-tier companies.

I started my career as an Oracle Access Manager. I worked on other products also. I feel like Oracle Access Manager is the standard and best product that I have used till date.

I rate the tool a ten out of ten.

We use the solution for single sign-on and multi-factor authentication.

My organization decided to use the product because it can handle multiple requests. It does not lag and has multiple features to connect with multiple applications. We do not have to involve any third-party vendors.

The product has multiple features that connect us to our on-premise and on-cloud solutions. It also enables mobile authentication. Oracle Access Manager provides many features in one single suit. The product supports customization. It provides many options to integrate single sign-on. It is a plug-and-play solution. It is a convenient product that is easy to deploy and easy to connect.

The product must improve multi-factor authentication. Multi-factor authentication requires a lot of processes and technicalities. It also involves a lot of costs.

I have been using the solution for four years.

The tool is stable.

The tool is scalable. In my previous organization, more than 1000 people were using the solution.

The support team responds on time and gives solutions to our problems. I rate the support an eight or a nine out of ten.

Positive

The initial setup is difficult on-premises. However, deploying the solution on the cloud is quite easy.

The product is a little expensive.

There are not many SSO providers that provide single sign-on features. If someone has a budget of $1000, I recommend choosing a different product that offers similar features with single sign-on and multi-factor authentication. Overall, I rate the tool an eight out of ten.

Our clients use Oracle Access Manager primarily for single sign-on, multi-factor authentication, and authorization.

The most important functions of Oracle Access Manager are single sign-on and its integration capability with different applications. I also have experience with its audit trail capability, which I find valuable. Oracle Access Manager audits all events in the system, including authentication, authorization, password resets, and user behavior. The benefits it provides to clients include enhanced security for users and applications, improved user experience through single sign-on, and scalability.

As for integration, Oracle Access Manager has good integration capabilities. It supports agent-based authentication and standard protocols like OAuth, OpenID, and FEM. The integration complexity ranges from simple to medium, depending on the application.

Based on my experience and client feedback, there are a few areas where Oracle Access Manager could improve. The user interface is a bit complicated and could be made more lightweight. Simplifying the installation process, perhaps through a VDAR-based installation, would also be beneficial.

Regarding additional functionality, it would be great if Oracle Access Manager could incorporate consumer identity and access management features, such as progressive profiling and User Managed Access (UMA). Improving latency and creating a more graphical user journey would also enhance the overall user experience.

I have been using Oracle Access Manager since 2006.

I would rate Oracle Access Manager a nine out of ten for stability. It is most suitable for enterprise-level companies due to its pricing.

Based on feedback, Oracle Access Manager is very robust regarding scalability. I would rate it ten out of ten for scalability.

Regarding the initial setup, I believe Oracle Access Manager could be made simpler.

I cannot comment on the exact pricing because Oracle has different licensing models for other clients, making it flexible.

It isn't the best in all scenarios when comparing Oracle Access Manager to competitors like Okta or IBM. However, it excels for large organizations with significant Oracle application landscapes. The product's suitability depends on the organization's size, application landscape, growth projections, and usability needs. Oracle Access Manager is a better choice if you need an enterprise solution for on-premises and hybrid deployments.

Overall, I would give Oracle Access Manager an eight out of ten. I can recommend this product to other users. I haven't had experience integrating AI tools with Oracle Access Manager, but it can be incorporated depending on the tool's capability.

We use it as a single sign-on solution for the Ministry of Economic Affairs in the Netherlands.

Its most valuable feature is implementing federated authentication since we use a federation with other servers.

The solution's lifecycle management is troublesome. Also, another area of issue in the solution is the part involving documentation of certain features. So, there are a lot of undocumented features in the solution or badly documented features, which are built-in into the solution later for special use cases.

The base configuration of the solution is not very complex, especially once a person knows how to do it. But then, if one wants special options, they are poorly documented.

I have been working with Oracle Access Manager for about ten years. Also, my company has a partnership with Oracle.

Stability-wise, I rate the solution a nine out of ten.

Scalability-wise, I rate the solution an eight out of ten. Around 15,000 people in my company use the solution. Not all of them use the solution itself. However, they all log in to the system. So, in our company, we manage with Oracle Access Manager. Basically, we have 15,000 users in our repository.

In our company, we do have experience with the solution's technical support team. Sometimes the technical support is very good and sometimes it is not that good. Also, we had some very good specialists at our site during the initial setup and the solution's first use. They had also shown us all the documented features in the tool, which one wouldn't have found by scanning the documents.

The first time when one does the initial setup, it can be complex. But if one does more initial setups and once a person knows how to do it, it's not very complex. It's quite a process to do the initial setup. But once a person has done it, they will have a shorter learning curve.

On a scale where one is a high price, and ten is a low price, I rate the solution a one. Purchasing a license for the solution is very expensive now. Cost is one of the reasons why we are moving away from Oracle Access Manager. In short, though Oracle products are worth their money, they are expensive.

The alternatives considered before choosing the solution were Open Access Manager, WSO2, and a solution in the Netherlands called OpenConnect. The Ministry of Economic Affairs website in the Netherlands used to be a very Oracle-dedicated site. So all the tools used were from Oracle. Also, they had a very good contract with Oracle for licenses and other such-related things. However, they are slowly moving away from Oracle to the cloud. So, maybe they're moving to Azure now. If so, then it will take some time.

I recommend the solution to those planning to use the product. Overall, I rate the solution a seven out of ten.

We've used Oracle Access Manager for an extensive transformation program.

My company has used most features of Oracle Access Manager for various implementations, but the most helpful feature of the solution for the business and customers is single sign-on.

The performance of Oracle Access Manager could be improved.

My company had some issues accessing it in terms of setup and configuration. It should be quick to install, but it wasn't, so this is another area for improvement.

The Oracle Access Manager console also has room for improvement because it's slow, so configuration and user management takes a lot of time. Configuring policies and blocking and unblocking URLs take time, so the user experience for Oracle Access Manager isn't as great.

We've been using Oracle Access Manager for almost eight years.

My company uses an older version of Oracle Access Manager, but I can say the solution is stable for the entire production environment.

Oracle Access Manager is scalable for what my company designed it for. It was designed for many loads, and I don't see any problems with scalability.

As the version of Oracle Access Manager on production was older, it required a lot of support, so I had to ask the customer to get dedicated support from Oracle. The support provided is a three out of five, though. There were a lot of problems because of the older platform version.

The initial setup for Oracle Access Manager is complex because it's not integrated properly. In Oracle, each product is separate. For example, you have Oracle Access Manager, Oracle Adaptive Access Manager, and Oracle Identity Manager, and there should be integration rather than individual products. Having a single pane of glass would be helpful to customers.

In terms of licensing cost, that was managed by the customer, and there was some agreement with Oracle, so I'm not sure about the pricing for Oracle Access Manager.

I've implemented Oracle Access Manager previously.

In the beginning, my company had forty thousand users of Oracle Access Manager. That number has gone down because it has become a legacy platform, and many people moved to other platforms. Now it's around fifteen thousand people using Oracle Access Manager, particularly B2B users.

Coverage-wise, Oracle has a lot of products, but I'd recommend Oracle, especially if you're focused on security. If you're looking into Oracle Access Manager, you can find other solutions in the market, but if you have a more extensive security implementation, then Oracle Access Manager is good.

As better integration is needed and more people prefer a single pane of glass, I'd rate Oracle Access Manager as five out of ten. Oracle should also make the product lightweight, similar to some of the open-source products in the market, and more innovative. It would be great to have just one product combining all the aspects of Oracle Access Manager and Oracle Identity Manager.

We primarily use the solution for accessing other applications, meaning it gives a single sign-on and multifactor authentication. That is the main use case. I use it with Oracle Identity Governance. I use it if I need to request permissions for certain business applications. 

The MFA is the most valuable aspect. That is the one feature I use every time. Security-wise, it's great. It recognizes the risk factor. Based on the way I log in, if I enter my password several times, failure is required for additional authentication. From a security perspective, it's great.

The solution is stable. 

It's quite scalable.

Sometimes if a session takes too long, you have to log in again. Instead of it giving you an explicit error or an explicit message that the session was expired, you need to log in again. It takes you to a certain empty page where you see the Access Manager. It does not give you help. It would be ideal if they could prompt a more user-friendly message so that someone knows that they have timed out in the session if it was idle. That is the main area out for improvement. The rest is fine.

It has a complex setup.

The user interface could be a bit better. 

I've been using the solution for three years. 

I have not had any issues at all when it comes to stability. We access it. I use it every time. We use it with remote work and we access our applications from anywhere, 24/7. We have not had issues surrounding any failure or instability. I've never seen a failure myself.

The number of users we deal with keep changing. There are always users coming, joining, or leaving. In terms of scalability, it's good. We can scale up and down. 

Right now we have somewhere around 1,000 users.

I am not part of the people who get support. I am mostly a net user. I couldn't say how the team that system gets support.

The implementation is complex. Where I use it, was already set up. I don't know how it was set up. However, when I look at it, I can see it is a complex deployment. 

There's just one payment and then annual support for the solution. I'm not sure of the exact costs.

I'm a customer and end-user.

I'd rate the solution nine out of ten.