AWS Organizations vs. Oracle Cloud Infrastructure Identity Access Management (OCI IAM)

AWS Organizations is well suited for centralized billing and user management of all of your AWS accounts when paired with AWS SSO and a SAML provider of your choice. AWS Organizations does not have an integration with IAM user accounts and this could be helpful for organizations without SAML capability.

Incentivized

Scenarios where IDCS is well suited:

• Oracle Identity Cloud Service is well-suited for organizations that require a centralized approach to managing user access and authentication across multiple applications and services.

• Organizations with strict compliance requirements

Scenarios where IDCS might be less appropriate:

• Organizations with limited customization requirements

Incentivized

• Brings all AWS organizations under one management structure for billing
• Simplified management of user access with AWS SSO
• Centralized reporting

Incentivized

• Restrict access to the applications outside our organization network.
• Multiple IDP configurations make it easy for us to authorize access.
• The adaptive security feature lets us know high-risk users.

Incentivized

• Could include cross organization IAM management
• Could allow quick login access to other organizations like the AWS SSO homepage

Incentivized

• DJSIR Oracle Identity Cloud Service is federated with DJSIR SSO. When an employee leaves the company an office account will get deleted but it's not reflecting in Oracle Identity Cloud Service or the profile is not getting deleted from Oracle Identity Cloud Service console.
• Oauth setup for the application is a bit confusing
• Increase the number of reports available

Incentivized

Oracle cloud services meets most of our needs. I hope in the future we could look at more of the OIG functions included so we could move away from needing to stand up that component.

Incentivized

The support for Oracle Identity Cloud Service is generally good. Nevertheless, it can take some time to get a response from the support team which creates initial frustration, and the customer will have to wait till the SR gets assigned to a support person.

Incentivized

Not applicable. AWS Organizations is unique in managing multiple AWS accounts.

Incentivized

Oracle's Identity Cloud Service works more in conjunction with the aforementioned. I think it works similar to Oracle Identity Management (OID) but seems a little more abstracted.

Incentivized

I hope at some point we could get away from needing to "bring our own" licenses and just have a unique user login rate.

Incentivized

Oracle provided various services we could take advantage of to get the environment configured correctly without needing to hire contractors.

Incentivized

• AWS Organizations allow for quick user access when paired with AWS SSO and SAML groups.
• AWS Organizations does not use IAM users and there is an initial cost in time to set up AWS SSO.

Incentivized

• It streamlined our Oracle PAAS implementation where we were able to achieve single sign-on functionality seamlessly.
• It provided us the feature to restrict outside access.
• It provided us with features to perform social IDP configuration for our custom applications.

Incentivized