CyberArk Privileged Access Management vs. OCI Identity and Access Management

The system is great for enterprise or larger IT departments or teams where temporary or full access may be given using privileged IDs. Requirements for needing local admin access is also eliminated which can help with specific Windows workstation related tasks. It can be very useful when working with remote teams or contractors who may need temporary access to a system when required.

Incentivized

Scenarios where IDCS is well suited:

• Oracle Identity Cloud Service is well-suited for organizations that require a centralized approach to managing user access and authentication across multiple applications and services.

• Organizations with strict compliance requirements

Scenarios where IDCS might be less appropriate:

• Organizations with limited customization requirements

Incentivized

• Automatically discover new servers on the network and take control of the local admin password by vaulting it and ensuring nobody knows the password. A different password on every server.
• Automatically roll the password in a configurable manner - after each use, after a certain period of time, etc.
• Track and govern sensitive account usage by ensuring only properly authorized users can access the vault and obtain the credentials and then monitor usage.

Incentivized

• Restrict access to the applications outside our organization network.
• Multiple IDP configurations make it easy for us to authorize access.
• The adaptive security feature lets us know high-risk users.

Incentivized

• GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
• More options when storing passwords - especially for network based passwords
• Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)

Incentivized

• The web interface has gotten better over the years, but some functionality is still being handled via shell commands.
• SSL setup can be simplified into one place instead of having to navigate to multiple pages and update different key-stores or wallets.
• Migrating and or replicating between versions can be more intuitive with a side-by-side comparison of schema/attributes.

Incentivized

It’s very usable once the complexity of deployment has completed. It is a useful tool that is easy to learn and the user interface is laid out well. It works with SSO for our organization which makes secure login very fast as well. It works well across our need of on premises systems and cloud very quickly.

Incentivized

Oracle cloud services meets most of our needs. I hope in the future we could look at more of the OIG functions included so we could move away from needing to stand up that component.

Incentivized

I've been an engineer and architect in the Identity space for many years and CyberArk is the #1 tool I've found to help me secure accounts and credentials. I've architected CyberArk and built the implementation from the ground up twice in previous roles and found it here upon my arrival at my current job. I wouldn't want to have to live without it as it helps me sleep at night

Incentivized

We have contacted Oracle support a few times regarding admin access queries and every time we received prompt replies and help. In my experience, we only contacted 2 times in 3 years. I think it's because of ease of use and manageability. Also, Oracle Identity Cloud Service customer care team was pretty fast and helpful.

Incentivized

These other vendors have most of the safe features, but there were some things that I think CyberArk performed better while evaluating the other solutions. AWS secret manager was not available in one of the products and this was definitely needed in my environment. Also, bulk loading of accounts had a lot more flexibility in CyberArk than the other solutions. They offer both API and GUI options where the other vendors may not offer both.

Incentivized

I believe we had a quite fair RFP listing all our complex integration and being key on utilizing existing investments, the Oracle product met our requirements and the local partner presented that very well. With such combined synergy, the offering was appealing to be the winning bid and therefore Oracle Identity Management was selected.

Incentivized

I hope at some point we could get away from needing to "bring our own" licenses and just have a unique user login rate.

Incentivized

Oracle provided various services we could take advantage of to get the environment configured correctly without needing to hire contractors.

Incentivized

• Decreased the probability of an external cyber attack to privileged accounts..
• Management can control privileged account life cycle management more effectively
• Recording privileged sessions allows our organization to play back exactly the point of a breach or malicious behavior
• Automated system to manage and verify passwords, as privileged accounts are constantly created and deleted
• Automatic PWD change functionality will substantially decrease probability of PWD theft or misuse.

Incentivized

• I'm not sure we've seen actual ROI by implementing this product. We had many efforts to look at alternatives and to evaluate newer versions (OIG). In the end, we decided to replace it with Sailpoint.

Incentivized