Oracle Identity Governance Reviews

Based on what I have read in its OIM Service Manual and seen as a user with admin rights, the product certainly has a lot of capabilities and promise on identity and access management. However, I have yet to see its full functionality exercised in my organization.

It has improved my organization tremendously. When compared to its introduction five years ago, OIM in my organization has improved its use and dependability, allowing us to pass audit each time.

The proactive controls which can be configured to a granular level allowing the organization the flexibility to meet the changing demands of the workforce.

Reconciliation exceptions. Automation of validation exercises performed by humans over Recon Exceptions generated as a result of an access synchronization event over a user's need for access or not.

The most valuable feature is that it provides a consistent user interface. That's the primary thing, the consistent user interface.

Over time, it will improve the way my organization functions. We've had some challenges as far as rolling it out, but that's the goal. We have a consistent set of processes, so we need a consistent toolset to be able to disperse across our organization.

One of the things they don't have is, they don't provide support for what are called service accounts, non-human accounts, non-human IDs. That's critical.

In addition to that, we have some role mining capabilities that Oracle really hasn't included or defined what they're going to do, how they're going to incorporate that. They've been converging these two products for a very long time, Oracle Identity Manager (OIM) and Oracle Identity Analytics. There's still that component that's still outlying.

We've had some stability issues. We've worked closely with Oracle to resolve them. Just recently, we got performance issues. We're going to the new version. It was released last year. There are about a dozen customers that have it. We've discovered some performance issues. Oracle has worked closely with us. It's gotten to the point where it's ready to go. We're going live with it this weekend, the new version.

Scalability is one of the problems that we've had. Now that we've had it in production, and we have X number of concurrent users, we're having some performance issues. That's what they've helped us with, as far as they’ve given us some patches to correct the issues; it's become a little more acceptable. We're not at end state yet, so that's another thing we're going to continue to work with them on.

We meet often with Oracle. We have, literally, meetings at least twice a week with our technology staff. I coordinate a monthly meeting with some of their executives and our executives. We have a lot of visibility with Oracle. Overall, technical support is very good.

I was involved with the initial setup. It's not so straightforward. It's a very complicated space. It's a complicated tool to implement. There seemed to be a lot more customization and configuration that we needed to do; we initially believed we could just work out of the box.

Several years ago, I actually coordinated a proof of concept. We looked at several different vendors. We eventually landed with two vendors. We actually had kind of a bake off. Both of the vendors came in. We put them through a series of tests, we had usability tests, scripted tests. We had them demonstrate a lot of their functionality, and then we evaluated them. The OIM product came out on top.

We decided to go with Oracle because, when we did those different types of tests, they scored better than the other provider in all aspects.

When I’m selecting a vendor such as Oracle, it's important for us to make sure that they deliver on time, that they have a solid road map, and that they have the resources to back what they commit to.

I recommend the product. I recommend that they consider pilot rollouts when they go live, not a big bang, so they can gradually understand, once they implement it, what the real impacts are. That's pretty much the biggest “a-ha” that we had. Build the knowledge and understand how it functions, not just based on the documentation, but try it out, test it out, and come into it, eyes wide open.

I don't think there are other products like it out there. Again, there's always room for improvement.

• Centralized account management
• Provisioning, reconciliation
• Attestation/Re-certification
• Delegated administration

Application access is provided to and removed from end users in a timely manner, which removes delays in the on-boarding/off-boarding process. It also improves productivity and security.

It could be more stable and faster.

I've been using it for eight years.

I've had no issues with deployment.

There are issues with stability in the long run.

There are issues with the scalability in the long run.

6/10

6/10. You need to have serious leverage with the Oracle account managers to get support issues fixed quickly.

It was straightforward in our case. This depends on the customer requirements and also how well planned the project is.

We did it with an in-house team with help from the vendor.

One of the most visible improvements would be the fast turn around for getting users access to the system on the day they start work and getting users out of the environment on the last day of work.

The most important features that have impacted our environment recently are the Single Sign-On solution, role based provisioning, and the automated provisioning of accounts to target systems. This is because we operate in a large environment with huge user turnover. Lots of applications are manually provisioning and deprovisioning, which can be quite daunting when done manually.

The development and the administration side could be a lot more intuitive and easier to use than it currently is, in terms of functionality and what it tries to achieve as a Single Sign-On entity for an enterprise environment. However, on the development and administration side, the learning curve is steep and quite challenging to master.

We don’t really have any issues with the platforms stability as it is up and running with minimal downtime that is caused by the OIM itself. I would rate the platform as very stable.

At the moment, we have not had any issues with the product’s scalability.

The technical support from the product owners could be a lot better. Their default mechanism seems to be referring you to documentation, which most times does not solve your issues immediately. I believe that when you reach out to technical support for help, you want someone who can help address your needs immediately, not telling you how to investigate the issues yourself.

This is the first implementation of a Single Sign-On solution.

I was not here for the initial setup, but from what I have seen so far, it seemed pretty complex.

Document, Document, and Document. The product is very vast and complex and it can get pretty large in a short amount time. It pays to document every thing you do. Other than that, I think it’s a great product and it has a lot of potential.

Automated User Creation and provisioning of connected resources in the case of Identity Manager, Access control to protected web resources with regards to Oracle Access Manager.

OIM eliminates the need for manual creation of users and assigning of various resources. It reduces the time needed for onboarding new users.

The management of workflows could use some improvement as well as the overall performance of the product. Because this is such a complex product, we find that it runs a bit slower than its competitors.

I have used the Oracle products for 7 years. I have experience with both the 10g and 11g versions of the product.

Yes we encountered a lot of issues with deployment due to the fact that we are a highly customized environment.

No, this has not been much of an issue for us.

No this has not been much of an issue for us. The product scales quite well with the size of our user base.

The customer service for the product is satisfactory.

The level of tech support could use some improvement.

We did use a different product before going to Oracle and we made the switch due to lack of support for the other product.

The setup was complex due to too many customized provisioning workflows within our organization.

We implemented the product through a partner of the vendor. Their expertise was what we expected.

Yes, we evaluated both Sun Identity Manager, and CA Identity Manger.

I would say this is a good product but some time would have to be spent in planning and learning.

Scalability.

• Ease of use (updating entries)
• Backup strategy

• Centralized life cycle management of identities: the centralized view of people requesting access to provisioning to targets and governing the access from one place
• Periodic certifications of access for compliance

The organizational benefit is increased efficiency and simplicity so that we can manage the identify lifecycle faster and better, and so we can govern the access from a central place and make it easier.

Oracle is probably already working to make the overall user experience lighter, including the UI.

I have been working with all versions over the last seven years.

We have not encountered any deployment issues; it's manageable and easy.

The current version is stable. Past versions have stability issues.

There are some scalability issues with every product; most of them are related to load and performance but these can be handled and they are improving day by day.

Technical support is good, depending upon the severity and relationship with Oracle; but overall, you will get an answer.

Technical support is 3.0/5.

It's flexible enough but requires enough technical knowledge to set up.

We use Identity Management primarily within our installation of E-Business Suite. Identity Management gives us the ability for people who use Oracle Application Manager to login using their standard network username and password.

We are a pharmaceutical company. We use E-Business Suite and Identity Manager to bind into E-Business Suite. That gives us the ability to carry out an e-signature so that we can track and trace anything going on, or what's going on in the database base, back to what user signed for a particular step in a manufacturing sequence, and when they signed for it. So with Single-Sign On, we can basically audit each step of a particular piece of manufacturing, who carried out the step, and when they carried out the step.

Identity Manager is very complicated to set up. I guess where that comes from I believe, is we use it to buy into LDAP, and Microsoft and Oracle don't get on a corporate level, so it's going to be very difficult for them to get onto a software level, making it very, very complicated to set up. Now, we did eventually get there and the product does exactly what we'd expect it to do, but it took us a long time to get there.

Deploying it was difficult for the initial setup because it was complex. After that, we've had no issues with deployment.

It's very stable. We haven't had any issues with instability that were big.

It's scaled just fine for our needs.

We use Oracle Linux and WebLogic, and Identity Management, giving us a High Availability level that we're using with the Oracle Access Manager solution. Those 3 products in the stack -- the OS, the middleware, and then the Identity Management software to go into the middleware -- was such a complicated process to set up. I think Oracle should have provided some sort of flow chart or guide to get these products installed faster and configured in such a way that you are comfortable.