Oracle Identity Governance Reviews

Rich authorization engine for delegated admin
Robust workflow capability with BPML engine
Extensive connector support
Diagnostics are pretty good

Used it for external user registration, password & profile management

Attempted to model a hierarchical role model but the OIM Access Policies, which map roles to entitlements, don't provision entitlements from inherited roles. This is a flawed design, IMO, limiting you to a flat role model.

A lot of Dependencies - Oracle database, WebLogic, SOA
A lot of things still have to be done in Design Console, which still has a 90's UI.
No REST interface for Identity as a Service that I'm aware of
Doesn't hide its complexity

Expensive
Weak support team
Built on, and relies on ADF for extensibility

3+ years

Customer Service:

Poor

Technical Support:

Hit and miss

If you're anticipating a lot of growth, you may be able to keep costs more predictable with CPU-based licensing.

Classic enterprise provisioning system provides self-service, resource attestation, password synch, delegated admin. My use is for external user registration system into OID for target system.

The capability of writing a custom connector makes this product flexible enough to potentially reach all types of target systems.

As an SI, I have implemented this product at multiple customers and it has improved overall user management.

Capability of building custom forms: Currently, the form building has very limited customization capability.

I have been using it for 2.5 years.

Password Sync had some issues, where some passwords from Active Directory use to fail while synchronization.

In customer identity management, the product suffers performance issues when scaled up to large numbers of users.

Technical support is pretty decent; would rate it 6.5/10.

I did not previously use a different solution.

Initial setup had medium complexity in terms of custom connector building.

It is very expensive.

I did not evaluate other options. The customer chose this product.

It is one of the best in breed, but is very expensive.

• Provisioning
• Certification
• Self Service

It helped us reduce the user management cost, and strengthen IT security by reducing the risk.

New application onboarding requires a lot of complex configurations and setups to complete the onboarding of a new application.

I've been using it for over six years.

There were no issues with the deployment.

Stability is sometimes a challenge.

It’s a very scalable application.

6/10

It's complex as the product has compatibility with many different operating systems, databases and application servers. The initial setup requires a lot of complex configurations during installation.

We’ve outsourced infrastructure and application management, but application development and implementation is in-house. I would recommend this approach.

I have evaluated many IAM options, including cloud and open source products on the market. OIM fulfills the requirements for my organization.

Try to focus on the IAM processes and functional side of the field, rather than technical development.

User provision and user de-provision access to resources like email.

We are a Consulting company but for our customers it saves time, help the user management and after implemented the company’s help desk is trained to support their employees.

Performance.

3 years

Yes, we encountered issues.

Yes, we encountered issues.

No issues.

6 out of 10.

Complex in compatibility between Operation System version, Data Base version, Fusion Middleware version and so on.

In-house.

No.

Once integrated, the administration console, integrated workflows (Entitlement requests) for approvals and self service features.

Since it was a suite of tools the customer used and we just needed to use OIM, it was a learning curve to get the products integrated and working together.

Just a couple of months during a Pro Services engagement

Very good support

We needed to integrate a product using Active Directory with OIM. Getting the initial OIM product up and running in the lab was complex for first timers as well as understanding whether to use the adapter factory or if we could use an existing pre-configured connector.

This product has many features that we were not required to worry about due to the workflows that were already created by the customer who was using the Identity governance features as well.

• Provisioning
• Reconciliation engine
• Adapter factory

It has helped in automating and reducing manual processes.

It needs to be more flexible and should have friendlier UI with more integrated features within a single UI.

I have used this product for over three years.

We faced many issues while migrating onto this solution.

No issues encountered.

No issues encountered.

Customer Service:

6/10.

Technical Support:

3/10.

No previous solution used.

It was pretty complicated. Everything should be UI and the 'All Design' console features should be available within the administration console.

We implemented it through an in-house team.

It is pretty good.

We had a few options like BMC, Novell, and Tivoli IDM's
.

Hire experts to do the implementation as all the functionalities are overly complicated.

Because OIM has a Java API, you can develop scripts and automate tasks. Integration with other products written in Java is easy, more or less.

The user just has to search the product+role in OIM and request it, with an approval workflow. The account is created automatically.

The GUI is very old and could be more user friendly; not all administrative operations can be done with the web interface. You need a Java client for fine tuning. Search operations are very slow, and you often need to use a wildcard. Users expect much-easier, Google search-type operations.

Stability can also be improved.

I have used it for two years.

• We see a lot of Java exceptions in logs
• The task scheduler often doesn’t work.
• It loses its connection with BBDD clusters.
• We need to reboot the product very often.
• Data sources stop working after a few days of intensive use

I have not encountered any scalability issues.

Technical support is 9/10.

I did not previously use a different solution.

Initial setup was complex; a lot of customizations are needed for the product to work.

Before choosing this product, I did not evaluate other options.

Try to implement newer versions (OIM 12c, for example), or change to other vendors (IBM, CA).

Oracle Identity manager (OIM) is an application for identity administration and provisioning -- it's a solution which helps organizations to automate various tasks like adding, updating, disabling and or deleting user accounts from various applications from a single place. By implementing OIM in the infrastructure any organization can improve its compliance. With each step generating reports and optionally asking for authorization, there are very few places to look for a security hole. OIM is built on Java architecture which provides a scalable, robust and secure platform, Hence I would already give it a plus one score. OIM when combined with other applications like Oracle Adaptive Access Management (OAAM), Oracle Virtual Director (OVD), Oracle Internet Directory (OID), etc gives the best results.

I could not come up with any cons from using this product.

The second place where OIM scores well is the Out Of the Box connectors which come bundled with OIM. The concept of self service is tightly and rightly integrated with OIM. With granular functioning which could be customized to suit the organization's needs, OIM really stands out in User Account Creation, provisioning, SSO, Compliance support etc to name a few. If you cannot find what you are looking for, you can build it and integrate it with OIM which makes it a good choice when choosing an Identity access management framework for your organization.