Oracle Access Manager Reviews

We use the solution for single sign-on purposes.

It's hard to say what the solution's finest feature is.

In general, the customization that is offered is very good. The company that I am working with currently is using this feature quite extensively.

The pricing of the solution is in need of improvement. Oracle products are very expensive. 

The customization is good, but it could be better still.

The documentation needs to be improved. It should offer much more detail than what is currently available.

I've been using the solution for about six years.

The solution is stable. We haven't faced any bugs or glitches so far. It's worked well for us.

The solution is scalable. We have about 20,000 people on it currently. We use it for several ministries here in the Netherlands. 

Everyone at the various ministries log in using Oracle. They aren't actually on the product per se, but they are using the single sign-on functionality. The total number of users that physically use the solution are around 30. They're developers. We don't have more than 30,000 end users.

Technical support has been quite good for us. We've even had some support from Oracle on-premises in our offices. We've been satisfied with the level of support we've gotten so far.

The first implementation was quite complex. It does get easier over time, however. We now have much more experience installing it, so implementation is becoming easier.

The first time you deploy the solution, you're looking at a couple of months in terms of length. When you get more experienced, it may only take a few weeks.

I'm not in charge of the pricing or things of that nature. However, I am aware that the ministry I'm working with has a special contract with Oracle. They have their own pricing system here.

I'm a consultant that works with a company that uses this solution. We don't have a business relationship with Oracle.

The company is currently using version 11 or 12.

I'd recommend the solution. The caveat is users who are considering the solution need to do a POC first. This will help determine how well it would work for the organization.

It's a pretty complex product. Users could definitely use more documentation.

I'd rate the solution eight out of ten.

Single sign on between analytics and financial platform for internal and external users.  Authorization was front-door only, no granularity between apps.  Used to force acknowledgement of terms of use.

I was able to use the new SAML Service Provider capability to consume a federated token and exchange it for an OAM token for subsequent session requests across multiple applications.

Pretty robust dynamic HTTP Header Responses
Stateful session management, enabling server-side session termination and/or prevention of concurrent logins.

The ADF UI is clunky, IMO
The session URL redirects have to be accounted for network-wise. Default is client talking to OAM Server (PDP) in middle tier, which is not realistic. Need separate load balancer/VIP just for this.
Identity propagation to backend apps still immature, IMO. Still relying on headers without any kind of callbacks or 2-way verification, even with Oracle apps.

No

Too many HA interfaces.

Customer Service:

Poor. The EBS Access Gate support was delivered as a patch and support was not able to solve various problems, which I believe to be attributes to more current versions of OAM and WebLogic not being backwards compatible with the documented solution.

Technical Support:

Great blog content from A-Team at Fusion Middleware Security blog.

I've used Symplified, SiteMinder in other shops. This was an Oracle shop, so there was no discussion on which solution was best.

Only because I was familiar. I doubt a first-timer would be able to navigate the documentation.

I was the sole implementer as an independent contractor.

Cannot divulge.

Not in this case.

Consider alternatives. There's nothing specific to OAM required to provide SSO to Oracle applications.