Oracle Identity Governance Reviews

Automated User Creation and provisioning of connected resources in the case of Identity Manager, Access control to protected web resources with regards to Oracle Access Manager.

OIM eliminates the need for manual creation of users and assigning of various resources. It reduces the time needed for onboarding new users.

The management of workflows could use some improvement as well as the overall performance of the product. Because this is such a complex product, we find that it runs a bit slower than its competitors.

I have used the Oracle products for 7 years. I have experience with both the 10g and 11g versions of the product.

Yes we encountered a lot of issues with deployment due to the fact that we are a highly customized environment.

No, this has not been much of an issue for us.

No this has not been much of an issue for us. The product scales quite well with the size of our user base.

Customer Service:

The customer service for the product is satisfactory.

Technical Support:

The level of tech support could use some improvement.

We did use a different product before going to Oracle and we made the switch due to lack of support for the other product.

The setup was complex due to too many customized provisioning workflows within our organization.

We implemented the product through a partner of the vendor. Their expertise was what we expected.

Yes, we evaluated both Sun Identity Manager, and CA Identity Manger.

I would say this is a good product but some time would have to be spent in planning and learning.

• Provisioning
• Single Sign On.

It has streamlined user account lifecycle management and single sign on.

I did not give it 10 out of 10 because of the time it takes for new versions to mature before they are bug free.

The product is excessively resource intensive (i.e., hardware requirements) especially in the later versions.

I have used this solution for the lasts ten years.

Some issues, such as multi data-center deployments had issues, which were resolved after working with the vendor's A team.

Customer Service:

9/10

Technical Support:

9/10

The set up is fairly complex and requires certain degree of training and/or experience.

We did the implementation in-house.

Yes we also looked at solutions from CA and IBM.

Use the previous version.

Automatic Onboarding and Offboarding.

Automatic onboarding of employees and off boarding of employees, also single sign on feature is one of the key features.

Though Oracle advertises integration of Oracle Identity Manager – Oracle GRC and Oracle EBS works, but it never works in real time.

3 years.

Yes we had lot of bugs, but Oracle resolved them.

Yes sometimes.

Yes sometimes.

Customer Service:

6.5 out of 10.

Technical Support:

7.5 out of 10

No previous solution used.

It was quite complex to set-up.

We implemented it with a vendor team.

6 months of implementation and it took almost $500k.

No, we are a big Oracle shop.

If they are not an Oracle shop, I recommend evaluating other software as well.

Oracle Identity manager (OIM) is an application for identity administration and provisioning -- it's a solution which helps organizations to automate various tasks like adding, updating, disabling and or deleting user accounts from various applications from a single place. By implementing OIM in the infrastructure any organization can improve its compliance. With each step generating reports and optionally asking for authorization, there are very few places to look for a security hole. OIM is built on Java architecture which provides a scalable, robust and secure platform, Hence I would already give it a plus one score. OIM when combined with other applications like Oracle Adaptive Access Management (OAAM), Oracle Virtual Director (OVD), Oracle Internet Directory (OID), etc gives the best results.

I could not come up with any cons from using this product.

The second place where OIM scores well is the Out Of the Box connectors which come bundled with OIM. The concept of self service is tightly and rightly integrated with OIM. With granular functioning which could be customized to suit the organization's needs, OIM really stands out in User Account Creation, provisioning, SSO, Compliance support etc to name a few. If you cannot find what you are looking for, you can build it and integrate it with OIM which makes it a good choice when choosing an Identity access management framework for your organization.

Once integrated, the administration console, integrated workflows (Entitlement requests) for approvals and self service features.

Since it was a suite of tools the customer used and we just needed to use OIM, it was a learning curve to get the products integrated and working together.

Just a couple of months during a Pro Services engagement

Very good support

We needed to integrate a product using Active Directory with OIM. Getting the initial OIM product up and running in the lab was complex for first timers as well as understanding whether to use the adapter factory or if we could use an existing pre-configured connector.

This product has many features that we were not required to worry about due to the workflows that were already created by the customer who was using the Identity governance features as well.

Provisioning, Reconciliation, Identity Connector Framework, Sandbox Customization, Access Request Processing, SOA Integration for Approval Processes

Licensing

4 years

Oracle documentation provides comprehensive information about everything from development to deployment. If you follow the steps correctly, you won't have any issues. In case you miss some steps, you will get a fair amount of knowledge from the diagnostic logging.

No. The product is very stable.

No. The product provides a scalable enterprise identity management solution.

There is a huge community of Oracle Identity Managers from individual blogs to Oracle forums. You will be able to solve most of the issues with the help of this community. I never needed to interact with the technical team but I am not sure about others.

I have been using Oracle Identity Manager ever since I started working. I have not tried any other products.

I would say the initial setup was not very complex. The installation, design, development and deployment are all documented very well. Initially you will need to follow each and every step and later on you will understand why all those steps were necessary.

Oracle Identity Manager is a highly flexible and scalable enterprise identity management solution that is designed to administer user access privileges across a company's resources throughout the identity management life cycle, from initial on-boarding to final de- provisioning of an identity.

Oracle Identity Management - Pros: •Automates user identity provisioning and deprovisioning and enables organizations to manage the entire life cycle of user identities across all resources in the organization. •Oracle Delegated Administration Services: Provides trusted proxy-based administration of directory information to users and application administrators. •You can create access polices to manage users, e.g. modify, disable, delete, and unlock user accounts, passwords can also be changed for user accounts. •It can also be a means to conduct a comprehensive audit of user activities and their access privileges. •The Resource Management features, of the Administrative and User Console, enable you to manage resource objects for an organization or individual user. Managing resources includes the following activities: •Searching for and viewing the details of a resource •Disabling, enabling, and revoking a resource from users or organizations •Managing resource administrator and authorizer groups •Viewing, creating, and modifying workflows •Creating and managing IT resources •Creating and managing scheduled tasks Oracle Access Manager - Pros: •Oracle Access Manager provides Web-based identity administration and access control to web applications and resources running in heterogeneous environments. •Oracle Application Server Single Sign-On provides single sign-on access to Oracle and third-party web applications. •Oracle Enterprise Single Sign-On Suite, provides single sign-on for all applications and resources in an enterprise, without modification to the applications.

In my opinion it has no cons.Oracle Access Manager (OAM) mainly consists of two main systems 1.Oracle Identity Management 2.Oracle Access Manager Oracle Identity management enables enterprises to manage the entire life cycle of user identities across all enterprise resources, both within and beyond a firewall. An enterprise identity management solution can provide a mechanism for implementing the user management aspects of a corporate policy. Oracle Access Manager:

Access Management Oracle Access Manager stores information about configuration settings and security policies, that control access to resources in a directory server that uses Oracle Access Manager-specific object classes. You can use the same directory to store the Access System configuration settings, access policy data, and user data, or you can store this data on separate directory servers. Administrators can use the Access System to protect web resources and enterprise resources such as J2EE applications, servlets, Enterprise Java Beans (EJBs), and legacy systems. The Access System also supports both Web (HTTP) and similar types of data in non-Web (non-HTTP) resources. Using the Access System for security administration enforces your company's access security policies for Web applications and content; provides common security measures across multiple Web servers and applications; combines a centralized policy creation with decentralized management and enforcement; and enables granular control over security, across heterogeneous applications, as well as out-of-the-box integration with Oracle products, such as Oracle Portal, Oracle Collaboration Suite, and Oracle E-Business Suite.