Oracle Identity Governance Reviews

Reconciliation and provisioning engine, but we also use other features like requests, approvals, and reporting.

We now have better control of our identity data and entitlements in target systems. Automation of provisioning, updating and deprovisioning of accounts in target systems.

The process of integrating with target systems can be simplified. Setting up a connector is a cumbersome process involving several interfaces, configuration objects, etc.

It's been in production for three years.

There were no issues with the deployment.

Minor issues with stability and performance, but after tuning properly most of these were solved.

It's been able to scale for our needs.

Depends on the support agent. It can vary from good to very poor. In general, it takes a lot of time before support requests are routed to higher instances like development teams.

Initial setup has got better then previous versions, but still has place for improvement. The setup involves a lot of sub-components with many dependencies etc. The documentation is not entirely clear with regards to dependencies.

I work for a consulting company that has implemented Oracle Identity Manager at clients. It might be that my views are biased, but I would certainly recomend to have technical expertise before starting an implementation project.

I would recommend purchasing the licenses before the end of Oracles fiscal year. You tend to get the best discounts then.

We are currently involved in the process of evaluating other vendors.

Gartner and Forrester offer reports comparing and ranking different vendors. At the initiation of our implementation project, Oracle was ranked as a leader. The picture has changed since then. In my personal opinion, the choice of technical solution should always be subordinate to companys needs, issues and use-cases. When these are defined, the company should compare several different solutions to each other and focus on ease of learning and use of product.

It has improved the way my organization functions through customer implemented OIM and OIA. It keeps us compliant and away from risks and federal penalties.

I have found the OIM Connector framework, based on ICF, to be the most valuable feature.

OIA needs to improve its governance features.

I did not encounter any issues with stability.

I did not encounter any issues with scalability.

Oracle's support is not as good as that of other vendors.

We started with OIG.

The initial setup was complex, due to suite level integration.

Oracle licenses are expensive. I suggest making pricing and licensing decisions that align with architectural requirements and the project's budget.

I evaluated CA and RSA before making my decision.

Go with Oracle if you expect more customization features from the product.

Rich authorization engine for delegated admin
Robust workflow capability with BPML engine
Extensive connector support
Diagnostics are pretty good

Used it for external user registration, password & profile management

Attempted to model a hierarchical role model but the OIM Access Policies, which map roles to entitlements, don't provision entitlements from inherited roles. This is a flawed design, IMO, limiting you to a flat role model.

A lot of Dependencies - Oracle database, WebLogic, SOA
A lot of things still have to be done in Design Console, which still has a 90's UI.
No REST interface for Identity as a Service that I'm aware of
Doesn't hide its complexity

Expensive
Weak support team
Built on, and relies on ADF for extensibility

3+ years

Poor

Hit and miss

If you're anticipating a lot of growth, you may be able to keep costs more predictable with CPU-based licensing.

Classic enterprise provisioning system provides self-service, resource attestation, password synch, delegated admin. My use is for external user registration system into OID for target system.

The capability of writing a custom connector makes this product flexible enough to potentially reach all types of target systems.

As an SI, I have implemented this product at multiple customers and it has improved overall user management.

Capability of building custom forms: Currently, the form building has very limited customization capability.

I have been using it for 2.5 years.

Password Sync had some issues, where some passwords from Active Directory use to fail while synchronization.

In customer identity management, the product suffers performance issues when scaled up to large numbers of users.

Technical support is pretty decent; would rate it 6.5/10.

I did not previously use a different solution.

Initial setup had medium complexity in terms of custom connector building.

It is very expensive.

I did not evaluate other options. The customer chose this product.

It is one of the best in breed, but is very expensive.

• Provisioning
• Certification
• Self Service

It helped us reduce the user management cost, and strengthen IT security by reducing the risk.

New application onboarding requires a lot of complex configurations and setups to complete the onboarding of a new application.

I've been using it for over six years.

There were no issues with the deployment.

Stability is sometimes a challenge.

It’s a very scalable application.

6/10

It's complex as the product has compatibility with many different operating systems, databases and application servers. The initial setup requires a lot of complex configurations during installation.

We’ve outsourced infrastructure and application management, but application development and implementation is in-house. I would recommend this approach.

I have evaluated many IAM options, including cloud and open source products on the market. OIM fulfills the requirements for my organization.

Try to focus on the IAM processes and functional side of the field, rather than technical development.

User provision and user de-provision access to resources like email.

We are a Consulting company but for our customers it saves time, help the user management and after implemented the company’s help desk is trained to support their employees.

Performance.

3 years

Yes, we encountered issues.

Yes, we encountered issues.

No issues.

6 out of 10.

Complex in compatibility between Operation System version, Data Base version, Fusion Middleware version and so on.

In-house.

No.

• Provisioning
• Reconciliation engine
• Adapter factory

It has helped in automating and reducing manual processes.

It needs to be more flexible and should have friendlier UI with more integrated features within a single UI.

I have used this product for over three years.

We faced many issues while migrating onto this solution.

No issues encountered.

No issues encountered.

6/10.

3/10.

No previous solution used.

It was pretty complicated. Everything should be UI and the 'All Design' console features should be available within the administration console.

We implemented it through an in-house team.

It is pretty good.

We had a few options like BMC, Novell, and Tivoli IDM's
.

Hire experts to do the implementation as all the functionalities are overly complicated.

Because OIM has a Java API, you can develop scripts and automate tasks. Integration with other products written in Java is easy, more or less.

The user just has to search the product+role in OIM and request it, with an approval workflow. The account is created automatically.

The GUI is very old and could be more user friendly; not all administrative operations can be done with the web interface. You need a Java client for fine tuning. Search operations are very slow, and you often need to use a wildcard. Users expect much-easier, Google search-type operations.

Stability can also be improved.

I have used it for two years.

• We see a lot of Java exceptions in logs
• The task scheduler often doesn’t work.
• It loses its connection with BBDD clusters.
• We need to reboot the product very often.
• Data sources stop working after a few days of intensive use

I have not encountered any scalability issues.

Technical support is 9/10.

I did not previously use a different solution.

Initial setup was complex; a lot of customizations are needed for the product to work.

Before choosing this product, I did not evaluate other options.

Try to implement newer versions (OIM 12c, for example), or change to other vendors (IBM, CA).