AWS Organizations vs. OCI Identity and Access Management

AWS Organizations is well suited for centralized billing and user management of all of your AWS accounts when paired with AWS SSO and a SAML provider of your choice. AWS Organizations does not have an integration with IAM user accounts and this could be helpful for organizations without SAML capability.

Incentivized

Scenarios where IDCS is well suited:

• Oracle Identity Cloud Service is well-suited for organizations that require a centralized approach to managing user access and authentication across multiple applications and services.

• Organizations with strict compliance requirements

Scenarios where IDCS might be less appropriate:

• Organizations with limited customization requirements

Incentivized

• Brings all AWS organizations under one management structure for billing
• Simplified management of user access with AWS SSO
• Centralized reporting

Incentivized

• Restrict access to the applications outside our organization network.
• Multiple IDP configurations make it easy for us to authorize access.
• The adaptive security feature lets us know high-risk users.

Incentivized

• Could include cross organization IAM management
• Could allow quick login access to other organizations like the AWS SSO homepage

Incentivized

• The web interface has gotten better over the years, but some functionality is still being handled via shell commands.
• SSL setup can be simplified into one place instead of having to navigate to multiple pages and update different key-stores or wallets.
• Migrating and or replicating between versions can be more intuitive with a side-by-side comparison of schema/attributes.

Incentivized

Oracle cloud services meets most of our needs. I hope in the future we could look at more of the OIG functions included so we could move away from needing to stand up that component.

Incentivized

We have contacted Oracle support a few times regarding admin access queries and every time we received prompt replies and help. In my experience, we only contacted 2 times in 3 years. I think it's because of ease of use and manageability. Also, Oracle Identity Cloud Service customer care team was pretty fast and helpful.

Incentivized

Not applicable. AWS Organizations is unique in managing multiple AWS accounts.

Incentivized

I believe we had a quite fair RFP listing all our complex integration and being key on utilizing existing investments, the Oracle product met our requirements and the local partner presented that very well. With such combined synergy, the offering was appealing to be the winning bid and therefore Oracle Identity Management was selected.

Incentivized

I hope at some point we could get away from needing to "bring our own" licenses and just have a unique user login rate.

Incentivized

Oracle provided various services we could take advantage of to get the environment configured correctly without needing to hire contractors.

Incentivized

• AWS Organizations allow for quick user access when paired with AWS SSO and SAML groups.
• AWS Organizations does not use IAM users and there is an initial cost in time to set up AWS SSO.

Incentivized

• I'm not sure we've seen actual ROI by implementing this product. We had many efforts to look at alternatives and to evaluate newer versions (OIG). In the end, we decided to replace it with Sailpoint.

Incentivized