Oracle Identity Governance Reviews

• Provisioning
• Reconciliation engine
• Adapter factory

It has helped in automating and reducing manual processes.

It needs to be more flexible and should have friendlier UI with more integrated features within a single UI.

I have used this product for over three years.

We faced many issues while migrating onto this solution.

No issues encountered.

No issues encountered.

Customer Service:

6/10.

Technical Support:

3/10.

No previous solution used.

It was pretty complicated. Everything should be UI and the 'All Design' console features should be available within the administration console.

We implemented it through an in-house team.

It is pretty good.

We had a few options like BMC, Novell, and Tivoli IDM's
.

Hire experts to do the implementation as all the functionalities are overly complicated.

• Reconciliation
• User Roles
• Privileges Management

It allows for more centralized user management, improving system administration efficiency and reducing costs.

Connectors that are available for integrating with different products. General stability of the product needs to be improved.

I am not exactly a consumer of the product but an implementer of the solution. I have been working on Identity and Access Management for around two years. We are a vendor and solution provider for this suite of products.

Many issues were faced during installation and deployment some of which were resolved by involving Oracle Support.

The product does have some issues with stability certain operations such as custom adapters and event handlers do not work properly.

We have not had the need to scale the product.

Customer Service:

Average.

Technical Support:

Poor.

User provision and user de-provision access to resources like email.

We are a Consulting company but for our customers it saves time, help the user management and after implemented the company’s help desk is trained to support their employees.

Performance.

3 years

Yes, we encountered issues.

Yes, we encountered issues.

No issues.

6 out of 10.

Complex in compatibility between Operation System version, Data Base version, Fusion Middleware version and so on.

In-house.

No.

The most valuable features are the attestation of identities and the robust set of identity analytics.

The way we have designed and implemented the solution has set us up to become a shared service model. This platform allows for us to customize any solution to meet the business capabilities.

With Oracle, it's always about the learning curve and the nature of how the product is integrated. It takes tons of training and getting the right experienced people involved in order to launch the initial framework. Some of the adapters also do not work very well or have limited functionality.

We have used Oracle IdM Products for 3 years now but just started using the new R2 framework 6 months ago.

Yes, we encountered issues with determining if we wanted to use the LCM installation over manual. Once we determined that LCM was a good choice then it was a pain getting the SAN setup correctly to allow for these silent installations.

In our sandbox environment we had stability issues but only because all the components are on the same server. Once we worked out the kinks of first time R2 users, the platform seemed fairly stable.

We did not encounter issues with scalability since we architected the solution to scale out enough to handle data.

Customer Service:

Oracle is pretty good about helping as long as you have the solution built according to their specifications. The trick with support is making sure the hand-offs are done in a timely manner since you may start with someone from a 6 time zone difference. I always get the duty manager involved with critical issues so that these gaps are addressed.

Technical Support:

Depending on who you get, some of these folks are really sharp and there are some still learning the product.

We used Microsoft ILM and FIM to manage our identity management provisioning and used Symphony for our Access Management side. We made the switch because Oracle offered a more robust solution for us to become a shared service for Identity Management.

As with any Oracle product, it's never straightforward. We knew what goals we needed to achieve but the challenge was having numerous design sessions to cover the possibilities, risks, and impacts in order to achieve those ambitious goals.

We had a combination of both in-house and outside professional services to help. I would rate our outside expertise very well.

Too early to determine at this point in time but we have some ROI on the deployment side by shaving 6 hours per environment setup by using automated installations.

Not including licence, we had a generous project budget to set-up and replace our legacy platform. The day-to-day cost is based on 3 people we have to support it. Of course our team & infrastructure is growing so the cost will rise by nature of supporting the service.

We evaluated products such as at Microsoft, Okta, CA, and IBM. The Oracle platform was more aligned with our business road maps and meets the desired capabilities the business needs.

Get people who have performed R2 installations and designs. This is important because if it's not done right the first time then you will be spending a lot of time either fixing issues or having to re-build everything. When you have such a robust system such as this, it gives you many ways to architect solutions.

Governance feature

• Security
• Online resources

• Security
• Mobile app

Five years.

Yes we did have issues with deployment.

Yes we did have issues with stability.

Yes we did have issues with scalability.

Customer Service:

6/10.

Technical Support:

5/10.

Yes, a customer used a different solution. We switched because the new solution can cover/manage most of the in-house systems/suites of apps.

Very complex due to the different sub-components.

Yes, we implemented with the help of vendor team support. Their level of expertise was about 7/10.

Short term, it was great but longer term, it became an issue.

Do a traceability and survey on what you need in the next 5 years, 10 years, etc.

Automated User Creation and provisioning of connected resources in the case of Identity Manager, Access control to protected web resources with regards to Oracle Access Manager.

OIM eliminates the need for manual creation of users and assigning of various resources. It reduces the time needed for onboarding new users.

The management of workflows could use some improvement as well as the overall performance of the product. Because this is such a complex product, we find that it runs a bit slower than its competitors.

I have used the Oracle products for 7 years. I have experience with both the 10g and 11g versions of the product.

Yes we encountered a lot of issues with deployment due to the fact that we are a highly customized environment.

No, this has not been much of an issue for us.

No this has not been much of an issue for us. The product scales quite well with the size of our user base.

Customer Service:

The customer service for the product is satisfactory.

Technical Support:

The level of tech support could use some improvement.

We did use a different product before going to Oracle and we made the switch due to lack of support for the other product.

The setup was complex due to too many customized provisioning workflows within our organization.

We implemented the product through a partner of the vendor. Their expertise was what we expected.

Yes, we evaluated both Sun Identity Manager, and CA Identity Manger.

I would say this is a good product but some time would have to be spent in planning and learning.

• Provisioning
• Single Sign On.

It has streamlined user account lifecycle management and single sign on.

I did not give it 10 out of 10 because of the time it takes for new versions to mature before they are bug free.

The product is excessively resource intensive (i.e., hardware requirements) especially in the later versions.

I have used this solution for the lasts ten years.

Some issues, such as multi data-center deployments had issues, which were resolved after working with the vendor's A team.

Customer Service:

9/10

Technical Support:

9/10

The set up is fairly complex and requires certain degree of training and/or experience.

We did the implementation in-house.

Yes we also looked at solutions from CA and IBM.

Use the previous version.

Automatic Onboarding and Offboarding.

Automatic onboarding of employees and off boarding of employees, also single sign on feature is one of the key features.

Though Oracle advertises integration of Oracle Identity Manager – Oracle GRC and Oracle EBS works, but it never works in real time.

3 years.

Yes we had lot of bugs, but Oracle resolved them.

Yes sometimes.

Yes sometimes.

Customer Service:

6.5 out of 10.

Technical Support:

7.5 out of 10

No previous solution used.

It was quite complex to set-up.

We implemented it with a vendor team.

6 months of implementation and it took almost $500k.

No, we are a big Oracle shop.

If they are not an Oracle shop, I recommend evaluating other software as well.

Oracle Identity manager (OIM) is an application for identity administration and provisioning -- it's a solution which helps organizations to automate various tasks like adding, updating, disabling and or deleting user accounts from various applications from a single place. By implementing OIM in the infrastructure any organization can improve its compliance. With each step generating reports and optionally asking for authorization, there are very few places to look for a security hole. OIM is built on Java architecture which provides a scalable, robust and secure platform, Hence I would already give it a plus one score. OIM when combined with other applications like Oracle Adaptive Access Management (OAAM), Oracle Virtual Director (OVD), Oracle Internet Directory (OID), etc gives the best results.

I could not come up with any cons from using this product.

The second place where OIM scores well is the Out Of the Box connectors which come bundled with OIM. The concept of self service is tightly and rightly integrated with OIM. With granular functioning which could be customized to suit the organization's needs, OIM really stands out in User Account Creation, provisioning, SSO, Compliance support etc to name a few. If you cannot find what you are looking for, you can build it and integrate it with OIM which makes it a good choice when choosing an Identity access management framework for your organization.

Once integrated, the administration console, integrated workflows (Entitlement requests) for approvals and self service features.

Since it was a suite of tools the customer used and we just needed to use OIM, it was a learning curve to get the products integrated and working together.

Just a couple of months during a Pro Services engagement

Very good support

We needed to integrate a product using Active Directory with OIM. Getting the initial OIM product up and running in the lab was complex for first timers as well as understanding whether to use the adapter factory or if we could use an existing pre-configured connector.

This product has many features that we were not required to worry about due to the workflows that were already created by the customer who was using the Identity governance features as well.