Oracle Identity Governance Reviews

Our primary use case for this product is user access attestations management, from initial user account creation to privileged accounts management, including user provisioning, and self-service access. The complete lifecycle management tool enables accurate and efficient account provision. 

In the past, we had to manually create user accounts. Now, our identity management system automatically manages users' access privileges. All we need to do is send the orders through.

The most valuable feature is the flexible automation functionality which has optimized our user access privilege management. This has allowed us to create and delete user accounts more accurately and efficiently. This feature has enabled us to save time and resources needed to perform mundane manual tasks.

We are happy with the platform. We haven't identified a need or a specific point to be improved. As a matter of fact, we are looking at more creative ways to use the system for our identity management needs. I'm looking to purchase additional modules for our system.

It's stable.

The solution is scalable. We currently have around 200 or so users.

In my opinion, our experience with technical support has been a positive one so far.

The initial setup was a bit complex primarily because you have to create a connector for every system enabling connections across the network. This is not an observation in regards to the platform itself.

The full deployment took about a year and we only require two people for maintenance.

We implemented through a vendor. We hired a consultancy company to do the initial setup and implementation.

After purchasing the solution we only needed to pay for the implementation phase to build the connectors etc. and the annual standard licensing fee for support.

We are very happy with the performance of the platform.

My advice for anyone thinking about implementing this solution is to first consider the scope and make sure it's clear; the scope and the features that you want to implement. You need full visibility because the suite of features are complex and you have to be clear on what you want to implement.

On a scale of one to ten, ten being the best, I'd rate the product an 8 out of 10.

Scalability.

• Ease of use (updating entries)
• Backup strategy

Based on what I have read in its OIM Service Manual and seen as a user with admin rights, the product certainly has a lot of capabilities and promise on identity and access management. However, I have yet to see its full functionality exercised in my organization.

It has improved my organization tremendously. When compared to its introduction five years ago, OIM in my organization has improved its use and dependability, allowing us to pass audit each time.

The proactive controls which can be configured to a granular level allowing the organization the flexibility to meet the changing demands of the workforce.

Reconciliation exceptions. Automation of validation exercises performed by humans over Recon Exceptions generated as a result of an access synchronization event over a user's need for access or not.

We use Identity Management primarily within our installation of E-Business Suite. Identity Management gives us the ability for people who use Oracle Application Manager to login using their standard network username and password.

We are a pharmaceutical company. We use E-Business Suite and Identity Manager to bind into E-Business Suite. That gives us the ability to carry out an e-signature so that we can track and trace anything going on, or what's going on in the database base, back to what user signed for a particular step in a manufacturing sequence, and when they signed for it. So with Single-Sign On, we can basically audit each step of a particular piece of manufacturing, who carried out the step, and when they carried out the step.

Identity Manager is very complicated to set up. I guess where that comes from I believe, is we use it to buy into LDAP, and Microsoft and Oracle don't get on a corporate level, so it's going to be very difficult for them to get onto a software level, making it very, very complicated to set up. Now, we did eventually get there and the product does exactly what we'd expect it to do, but it took us a long time to get there.

Deploying it was difficult for the initial setup because it was complex. After that, we've had no issues with deployment.

It's very stable. We haven't had any issues with instability that were big.

It's scaled just fine for our needs.

We use Oracle Linux and WebLogic, and Identity Management, giving us a High Availability level that we're using with the Oracle Access Manager solution. Those 3 products in the stack -- the OS, the middleware, and then the Identity Management software to go into the middleware -- was such a complicated process to set up. I think Oracle should have provided some sort of flow chart or guide to get these products installed faster and configured in such a way that you are comfortable.

• Centralized account management
• Provisioning, reconciliation
• Attestation/Re-certification
• Delegated administration

Application access is provided to and removed from end users in a timely manner, which removes delays in the on-boarding/off-boarding process. It also improves productivity and security.

It could be more stable and faster.

I've been using it for eight years.

I've had no issues with deployment.

There are issues with stability in the long run.

There are issues with the scalability in the long run.

6/10

6/10. You need to have serious leverage with the Oracle account managers to get support issues fixed quickly.

It was straightforward in our case. This depends on the customer requirements and also how well planned the project is.

We did it with an in-house team with help from the vendor.

• The automatic user management lifecycle with role-based features is great.
• It is also an application that makes it easy for on-boarding, automatic access privilege, and single sign-on with internal as well as external applications.
• It also has enough flexibility to unify the access management needs of any organization into one place.

It has allowed us to integrate multiple applications in one place. From there, we can manage all application access controls with many available features.

There were issues when we deployed it, though Oracle helped us resolve them. Also, there can be stability issues if the requirements are not all integrated appropriately.

We have been using this for the last five years.

We had issues that Oracle helped us to resolve.

No, we did not have any issues with stability, but it depends on how your system is integrated. If all requirements are integrated correctly, there should not be any issues with stability.

We have had no issues scaling it for our needs.

In our experience, I would rate customer service as a seven out of 10.

In our experience, I would rate technical support as an eight out of 10.

One of the most visible improvements would be the fast turn around for getting users access to the system on the day they start work and getting users out of the environment on the last day of work.

The most important features that have impacted our environment recently are the Single Sign-On solution, role based provisioning, and the automated provisioning of accounts to target systems. This is because we operate in a large environment with huge user turnover. Lots of applications are manually provisioning and deprovisioning, which can be quite daunting when done manually.

The development and the administration side could be a lot more intuitive and easier to use than it currently is, in terms of functionality and what it tries to achieve as a Single Sign-On entity for an enterprise environment. However, on the development and administration side, the learning curve is steep and quite challenging to master.

We don’t really have any issues with the platforms stability as it is up and running with minimal downtime that is caused by the OIM itself. I would rate the platform as very stable.

At the moment, we have not had any issues with the product’s scalability.

The technical support from the product owners could be a lot better. Their default mechanism seems to be referring you to documentation, which most times does not solve your issues immediately. I believe that when you reach out to technical support for help, you want someone who can help address your needs immediately, not telling you how to investigate the issues yourself.

This is the first implementation of a Single Sign-On solution.

I was not here for the initial setup, but from what I have seen so far, it seemed pretty complex.

Document, Document, and Document. The product is very vast and complex and it can get pretty large in a short amount time. It pays to document every thing you do. Other than that, I think it’s a great product and it has a lot of potential.

• Centralized life cycle management of identities: the centralized view of people requesting access to provisioning to targets and governing the access from one place
• Periodic certifications of access for compliance

The organizational benefit is increased efficiency and simplicity so that we can manage the identify lifecycle faster and better, and so we can govern the access from a central place and make it easier.

Oracle is probably already working to make the overall user experience lighter, including the UI.

I have been working with all versions over the last seven years.

We have not encountered any deployment issues; it's manageable and easy.

The current version is stable. Past versions have stability issues.

There are some scalability issues with every product; most of them are related to load and performance but these can be handled and they are improving day by day.

Technical support is good, depending upon the severity and relationship with Oracle; but overall, you will get an answer.

Technical support is 3.0/5.

It's flexible enough but requires enough technical knowledge to set up.