Oracle Identity Governance Reviews

We have been able, after eight months of coding our own Java classes, to implement a Joiner/Mover/Leaver process.

I won't lie to you. Since we didn't have an IDM, the idea of an IDM and all of its functionality has been valuable.

Most areas need improvements, all the way from the GUI to core functionality, logging, traceability, configuration, and bugs causing crashes. I don't know where to start. It is too complex, has too many bugs, and is an immature product, even the best case, beta version.)

One of the 5-6 consoles (Design Console) is a blast from the 1970's. It crashes constantly. The vendor is aware of it, but has stated that this is not a priority for them to fix.

There were no issues with scalability.

I would rate technical support as the worst. We have had constant meetings with them to follow up on our tickets. If you don't ask them for an update on a daily basis, they will not work on your case. Our average solution time is six to eight weeks, and this includes production issues. I have waited eight months for an answer, and the answer was, "If it fails when you do that, then don't do it."

We used an ETL-engine to push users earlier. It didn't have any "IDM functionality" so we switched to what we though was the best solution available.

I dare you to get an installation up and running in a PoC environment in less than a week. In my opinion, if you haven't done it before, you can't do it in less time.

Don't use it! Find something else. Ask me for advice. We are currently switching to another vendor/product.

There are many valuable features, most notably Single Sign-On, Identity Management, and Identity Connector Framework, which can be implemented to provision with diverse interfaces.

It has assisted us with UI customization, as well as connecting to other frameworks using the OSB (Oracle Service Bus) and Custom Connectors.

The product requires improvements for UI customization with the current sandbox. Many people prefer that sandbox be removed from the product, as it has caused major challenges with wide implementations. Another improvement would be to provide the user-friendly option of replicating out-of-the-box attributes.

This solution has been successfully implemented and managed for the past 3+ years.

Deployment of sandbox is a major concern, as its stability was underprivileged if implemented with multiple sandboxes from different out-of-sync locations.

Scalability is reduced if the load increases above approximately 100,000.

I would rate this a 7. Since they have wider support level every 12 hours, a service request might change to different time zone. Therefore the same request must be provided again to the new support assistance.

No comment. I personally was not involved during the initial phase.

I personally was not involved during the initial phase.

It was an in-house implementation. Full re-testing will be required if the implementation involves a sandbox and we need to have eyes on the request page labels post-implementation.

I recommend for people to wait for the new version, in which the concept of a sandbox will be removed.

I rate the product a 7. The product provides good out-of-the-box functionality, and Oracle provides fair technical support, but the product does have its drawbacks. Performance is bad, and tuning must be performed by Oracle, which will take time. Customization of the product’s existing features is not user-friendly.

Automatic Onboarding and Offboarding.

Automatic onboarding of employees and off boarding of employees, also single sign on feature is one of the key features.

Though Oracle advertises integration of Oracle Identity Manager – Oracle GRC and Oracle EBS works, but it never works in real time.

3 years.

Yes we had lot of bugs, but Oracle resolved them.

Yes sometimes.

Yes sometimes.

6.5 out of 10.

7.5 out of 10

No previous solution used.

It was quite complex to set-up.

We implemented it with a vendor team.

6 months of implementation and it took almost $500k.

No, we are a big Oracle shop.

If they are not an Oracle shop, I recommend evaluating other software as well.

• Provisioning
• Single Sign On.

It has streamlined user account lifecycle management and single sign on.

I did not give it 10 out of 10 because of the time it takes for new versions to mature before they are bug free.

The product is excessively resource intensive (i.e., hardware requirements) especially in the later versions.

I have used this solution for the lasts ten years.

Some issues, such as multi data-center deployments had issues, which were resolved after working with the vendor's A team.

9/10

9/10

The set up is fairly complex and requires certain degree of training and/or experience.

We did the implementation in-house.

Yes we also looked at solutions from CA and IBM.

Use the previous version.

OIM contributes majorly to simplifying the user management and role management capabilities of corporate users (employees, contractors, partners, and customers) from regulatory compliance requirements by enabling least privileged access.

• Provisioning workflow
• Accessing policies to automate provisioning requirements
• Identifying lifecycle management
• Identifying connector framework for unifying provisioning capabilities from OIM

This applies to the latest version of OIM support in WebLogic and WebSphere application servers only. It would be great if the Oracle Fusion Middleware team worked on making it compatible with other application servers, as it exists in OIM9.x.

No issues were found related to stability.

OIM is the right product and it is a good fit for enterprise deployments. There are no issues related to scalability, as long as it was configured as per Oracle enterprise deployment guidelines.

Customer Service:

I would give customer service a rating of six out of 10.

Technical Support:

I would give technical support a rating of six out of 10.

Depending upon requirements, it takes 10 days to three months to set up an environment.

Connectors and the ability to provision and reconcile information. We can remove all access in one hit, but also easily provision a user with accounts all from one place.

The provision and deprovisioning means its more secure, less administration is required, and all the information about an identity is stored in one place. It saves costs of having to administer a user in every area or application.

The Design console is a bit dated and complicated to use when in development. It’s the biggest issue out there for all Oracle OIM developers who want to develop connectors (custom). Also, they need more easy to understand guides on how to use the API’s within OIM to create notifications or event handlers. I have been on a development course and this is still an area I struggle with. If we had a better understanding of the dev side of things we would do so much more with this product.

There were no issues with the deployment.

We have had no issues with the stability.

It's scaled for our needs.

It’s a difficult product to fully understand but with time will become a lot easier to use. I have only used Oracle so I cannot compare it with other products.

Reconciliation and provisioning engine, but we also use other features like requests, approvals, and reporting.

We now have better control of our identity data and entitlements in target systems. Automation of provisioning, updating and deprovisioning of accounts in target systems.

The process of integrating with target systems can be simplified. Setting up a connector is a cumbersome process involving several interfaces, configuration objects, etc.

It's been in production for three years.

There were no issues with the deployment.

Minor issues with stability and performance, but after tuning properly most of these were solved.

It's been able to scale for our needs.

Depends on the support agent. It can vary from good to very poor. In general, it takes a lot of time before support requests are routed to higher instances like development teams.

Initial setup has got better then previous versions, but still has place for improvement. The setup involves a lot of sub-components with many dependencies etc. The documentation is not entirely clear with regards to dependencies.

I work for a consulting company that has implemented Oracle Identity Manager at clients. It might be that my views are biased, but I would certainly recomend to have technical expertise before starting an implementation project.

I would recommend purchasing the licenses before the end of Oracles fiscal year. You tend to get the best discounts then.

We are currently involved in the process of evaluating other vendors.

Gartner and Forrester offer reports comparing and ranking different vendors. At the initiation of our implementation project, Oracle was ranked as a leader. The picture has changed since then. In my personal opinion, the choice of technical solution should always be subordinate to companys needs, issues and use-cases. When these are defined, the company should compare several different solutions to each other and focus on ease of learning and use of product.

It has improved the way my organization functions through customer implemented OIM and OIA. It keeps us compliant and away from risks and federal penalties.

I have found the OIM Connector framework, based on ICF, to be the most valuable feature.

OIA needs to improve its governance features.

I did not encounter any issues with stability.

I did not encounter any issues with scalability.

Oracle's support is not as good as that of other vendors.

We started with OIG.

The initial setup was complex, due to suite level integration.

Oracle licenses are expensive. I suggest making pricing and licensing decisions that align with architectural requirements and the project's budget.

I evaluated CA and RSA before making my decision.

Go with Oracle if you expect more customization features from the product.