Oracle Identity Governance vs. SailPoint Identity Security Cloud

Oracle Identity Manager (OIM) is great if you have a huge organisation and a lot of users to support. It integrates particularly well if you want SSO and already use Oracle's business suit applications such as Oracle Business Intelligence. One of the most important things to keep in mind while deciding to go ahead with OIM is whether or not you have enough time, money and resources for its implementation because it can be very challenging and expensive.

Incentivized

We are happy with the management of the Id, accounts where the user can request any access easily. Also the many connector which Sailpoint is offering in order to onboard lots of applications is quite helpful. The access review module has also have been improve so that large campaigns can we work out easily.

Where we see some improvement is on the UI as here it is not so intuitive for the end user, so that we need to make lots of communications and training so that the user is able to understand how to use it.

For the administration and creation of roles it also would be great to have some improvements here to make it more easily its management.

• Provisioning and Deprovisioning from HR System PeopleSoft into OIM and downstream systems
• Access Requests and SOA Workflows
• Active Directory and Exchange Connnectors also work great

Incentivized

• The access request work flow and back end process is exceptional. It effectively manages all of the various pieces of a request and presents the completed request to the provisioning agent as a single record. This is very helpful to the efficiency of the process since the provisioning agent only sees the completed request rather than seeing each component as it is approved. Other systems deliver the various request components to provisioning as they are approved but cannot be provisioned without all the components. Thus creating complexity for the provisioning agent and impacting the SLAs with what looks like a delay with the provisioning process.
• The system is robust enough to effectively handle the scale that we need. With 750+ applications, 24,304 individual entitlements to select from, and an average of 10,200 request transactions per month. We have never had any performance issues.
• The system flexible enough to accommodate our complex business needs without needing to customize the base system. We have been able to add significant functionality to the system in order to support the business needs by extending the code rather than altering the base code. This has enabled a simple upgrade of the system without having to re-apply code enhancements.

Incentivized

• It is extremely difficult to install and administer.
• It is very complex, to set it up correctly requires a huge learning curve.
• The product is not stable and somewhat buggy.

• Technical adoption requires a high level of training and experience by the implementing teams.
• SailPoint and partners offers very good training courses which I think are very good. An area of improvement can be in providing cloud VMs that users can work with to learn the IIQ tool more effectively at their own pace.

Incentivized

Overall good product and somewhat reliable when used in a specific manner. However, there are cons like unending bugs and no well-defined upgrade path. The product could have been more flexible and lite in terms of organisational infra needs. OIM is a robust product but other vendors are almost on-par now.

Incentivized

Overall usablity is excellent. The product is capable of performing all the expected tasks for a IAM solution.

Incentivized

Support for Customizations is very limited.

Incentivized

Implementation was done correctly and all the requirements were met.

Incentivized

OIM is a leader in the identity management space and appropriate for specific organisations and use cases. Where its competitors have an edge over cost and overall look and feel of product, OIM offers Oracle's vast experience of enterprise security products and compatibility with infrastructure applications. It melds well with other Oracle security products like OAM and OAAM. When cost is not a problem and you are ready to invest your resources for long-term OIM is preferable. It has its pros and cons as explained earlier, and should be selected on basis of specific needs.

Incentivized

SailPoint is a more customizable solution than Okta, it is also not just a cloud application. Our use of IIQ to manage external suppliers via Azure AD guest accounts was not available on other platforms at the point of deployment. The integration with SAP and other Microsoft services is also second to none.

Incentivized

• It has sped up onboarding processes by at least 3x.
• Reduced workload.
• Auto-provisioning.

Incentivized

• The ability to automate the employee onboarding processes greatly reduces the staffing requirements for account creation and access assignment
• The self-service capabilities for the account registration and password management tasks have greatly reduced the number of calls to our Help Desk
• The role mining capabilities have reduced the amount of time required to assign and update our user application set mapping