Oracle Identity Governance Reviews

I feel the Provisioning and Reconciliation Engine as well as the Adapter Factory are most the valuable, apart from the standard features which most identity management solutions provide.

It has helped in central user management and the automation of account handling and creation for multiple systems. It has also helped in data interaction between customer and third party data, which is an integral part of any business these days.

Unfortunately while working with v9i, we had to do a lot of customizations because the product did not support much. With v11i, some of the customization has been reduced. However, the GUI is some what a bit more complicated, and it could be improved with a single GUI.

It's very poor, just 3/10.

Oracle is still very expensive, and is not generally used by SMEs.

With the new version of the products, its best left to the choice of the implementer to analyse the pros and cons of the different vendors before deciding on which product to choose.

We have been able, after eight months of coding our own Java classes, to implement a Joiner/Mover/Leaver process.

I won't lie to you. Since we didn't have an IDM, the idea of an IDM and all of its functionality has been valuable.

Most areas need improvements, all the way from the GUI to core functionality, logging, traceability, configuration, and bugs causing crashes. I don't know where to start. It is too complex, has too many bugs, and is an immature product, even the best case, beta version.)

One of the 5-6 consoles (Design Console) is a blast from the 1970's. It crashes constantly. The vendor is aware of it, but has stated that this is not a priority for them to fix.

There were no issues with scalability.

I would rate technical support as the worst. We have had constant meetings with them to follow up on our tickets. If you don't ask them for an update on a daily basis, they will not work on your case. Our average solution time is six to eight weeks, and this includes production issues. I have waited eight months for an answer, and the answer was, "If it fails when you do that, then don't do it."

We used an ETL-engine to push users earlier. It didn't have any "IDM functionality" so we switched to what we though was the best solution available.

I dare you to get an installation up and running in a PoC environment in less than a week. In my opinion, if you haven't done it before, you can't do it in less time.

Don't use it! Find something else. Ask me for advice. We are currently switching to another vendor/product.

Once integrated, the administration console, integrated workflows (Entitlement requests) for approvals and self service features.

Since it was a suite of tools the customer used and we just needed to use OIM, it was a learning curve to get the products integrated and working together.

Just a couple of months during a Pro Services engagement

Very good support

We needed to integrate a product using Active Directory with OIM. Getting the initial OIM product up and running in the lab was complex for first timers as well as understanding whether to use the adapter factory or if we could use an existing pre-configured connector.

This product has many features that we were not required to worry about due to the workflows that were already created by the customer who was using the Identity governance features as well.

There are many valuable features, most notably Single Sign-On, Identity Management, and Identity Connector Framework, which can be implemented to provision with diverse interfaces.

It has assisted us with UI customization, as well as connecting to other frameworks using the OSB (Oracle Service Bus) and Custom Connectors.

The product requires improvements for UI customization with the current sandbox. Many people prefer that sandbox be removed from the product, as it has caused major challenges with wide implementations. Another improvement would be to provide the user-friendly option of replicating out-of-the-box attributes.

This solution has been successfully implemented and managed for the past 3+ years.

Deployment of sandbox is a major concern, as its stability was underprivileged if implemented with multiple sandboxes from different out-of-sync locations.

Scalability is reduced if the load increases above approximately 100,000.

I would rate this a 7. Since they have wider support level every 12 hours, a service request might change to different time zone. Therefore the same request must be provided again to the new support assistance.

No comment. I personally was not involved during the initial phase.

I personally was not involved during the initial phase.

It was an in-house implementation. Full re-testing will be required if the implementation involves a sandbox and we need to have eyes on the request page labels post-implementation.

I recommend for people to wait for the new version, in which the concept of a sandbox will be removed.

I rate the product a 7. The product provides good out-of-the-box functionality, and Oracle provides fair technical support, but the product does have its drawbacks. Performance is bad, and tuning must be performed by Oracle, which will take time. Customization of the product’s existing features is not user-friendly.

Automatic Onboarding and Offboarding.

Automatic onboarding of employees and off boarding of employees, also single sign on feature is one of the key features.

Though Oracle advertises integration of Oracle Identity Manager – Oracle GRC and Oracle EBS works, but it never works in real time.

3 years.

Yes we had lot of bugs, but Oracle resolved them.

Yes sometimes.

Yes sometimes.

Customer Service:

6.5 out of 10.

Technical Support:

7.5 out of 10

No previous solution used.

It was quite complex to set-up.

We implemented it with a vendor team.

6 months of implementation and it took almost $500k.

No, we are a big Oracle shop.

If they are not an Oracle shop, I recommend evaluating other software as well.

• Provisioning
• Single Sign On.

It has streamlined user account lifecycle management and single sign on.

I did not give it 10 out of 10 because of the time it takes for new versions to mature before they are bug free.

The product is excessively resource intensive (i.e., hardware requirements) especially in the later versions.

I have used this solution for the lasts ten years.

Some issues, such as multi data-center deployments had issues, which were resolved after working with the vendor's A team.

Customer Service:

9/10

Technical Support:

9/10

The set up is fairly complex and requires certain degree of training and/or experience.

We did the implementation in-house.

Yes we also looked at solutions from CA and IBM.

Use the previous version.

OIM contributes majorly to simplifying the user management and role management capabilities of corporate users (employees, contractors, partners, and customers) from regulatory compliance requirements by enabling least privileged access.

• Provisioning workflow
• Accessing policies to automate provisioning requirements
• Identifying lifecycle management
• Identifying connector framework for unifying provisioning capabilities from OIM

This applies to the latest version of OIM support in WebLogic and WebSphere application servers only. It would be great if the Oracle Fusion Middleware team worked on making it compatible with other application servers, as it exists in OIM9.x.

No issues were found related to stability.

OIM is the right product and it is a good fit for enterprise deployments. There are no issues related to scalability, as long as it was configured as per Oracle enterprise deployment guidelines.

Customer Service:

I would give customer service a rating of six out of 10.

Technical Support:

I would give technical support a rating of six out of 10.

Depending upon requirements, it takes 10 days to three months to set up an environment.

Connectors and the ability to provision and reconcile information. We can remove all access in one hit, but also easily provision a user with accounts all from one place.

The provision and deprovisioning means its more secure, less administration is required, and all the information about an identity is stored in one place. It saves costs of having to administer a user in every area or application.

The Design console is a bit dated and complicated to use when in development. It’s the biggest issue out there for all Oracle OIM developers who want to develop connectors (custom). Also, they need more easy to understand guides on how to use the API’s within OIM to create notifications or event handlers. I have been on a development course and this is still an area I struggle with. If we had a better understanding of the dev side of things we would do so much more with this product.

There were no issues with the deployment.

We have had no issues with the stability.

It's scaled for our needs.

It’s a difficult product to fully understand but with time will become a lot easier to use. I have only used Oracle so I cannot compare it with other products.