Avatier Identity Anywhere vs. Oracle Enterprise Single Sign-On Suite Plus

Ease of use and a very customer focused catalog process. Would like service now functionality implemented with the tool so teams can user 1 work tool to work from. The access governance process is very well designed and extremely useful for our organization to be able to identify users that have the inappropriate access levels for their current roles

Good if you want a temporary solution to too many passwords.

Incentivized

• It allows users to reset their passwords on their own.
• It allows our users to request access to VPN and shared drive on their own.
• It allows us to terminate accounts quickly and easily.

• Flexible to work with most web sites and thick clients
• Avoids users having to type their passwords repeatedly
• Fairly performant

Incentivized

• The only issue I have come across is that if a user begins to reset their password, but doesn't remember all of their security questions, sometimes the tool triggers a reset even if they didn't successfully reset themselves. This becomes a problem in an environment that has password complexity requirements, such as not being able to change your password again within a 24 hour period.

Incentivized

• This tool is essentially a hack, making the user experience pretty weak. For example, we use it in an application which has a box to type your password. Every time you enter some data, ESSO steals the focus and types your password into the box, even if you aren't about to submit the form requiring the password.
• This tool creates a 2nd CN in the directory and this broke some of our applications which were only expecting a single CN per user in the directory. Why can't it use a traditional database instead?
• This tool caused performance issues with Putty. It would peg our CPUs at 100% if the user had Putty running. It took a very long time to resolve the issue.

Incentivized

At the time that we implemented the solution Avatier appeared to be the best solution and has continued to meet our needs in this space

Incentivized

There's no substitute for properly developed applications that delegate authentication to an external system like Active Directory or a cloud identity provider. That way, the issues with screen scraping and constantly-breaking integration are solved permanently.

Incentivized

• The main positive is the number of calls into our help desk or LAN team have gone down to a few calls a week; instead of the masses going to them on a daily basis.

• We spent a lot of time implementing it on different applications. However, because it uses screen scraping, every time our apps upgraded, it broke the integration with ESSO, so we had to keep fixing the integration. After a few years, we have stopped integrating new apps with it due to this headache.

Incentivized