F5 BIG-IP Access Policy Manager (APM) vs. OCI Identity and Access Management

I think that the platform is well suited to many Remote Access VPN solutions, but I also think there is a lot of room for improvement on the backend. If you are hoping to deploy your APM solution across many different datacenters or colos, it may not be the best choice for the final solution.

Incentivized

Scenarios where IDCS is well suited:

• Oracle Identity Cloud Service is well-suited for organizations that require a centralized approach to managing user access and authentication across multiple applications and services.

• Organizations with strict compliance requirements

Scenarios where IDCS might be less appropriate:

• Organizations with limited customization requirements

Incentivized

• SAML 2.0 identity federation support.
• Integrates with third-party SSO solutions.
• Bridging modern authentication and authorization (SAML, OAuth/OIDC) and classic authentication and authorization methods.
• Policy routing

Incentivized

• Restrict access to the applications outside our organization network.
• Multiple IDP configurations make it easy for us to authorize access.
• The adaptive security feature lets us know high-risk users.

Incentivized

• There's some more advanced configurations within OAuth that I think could be fleshed out and easier to approach.
• There's a lot of things in F5 BIG-IP Access Policy Manager policies that I find myself recreating every policy. An easier way to copy objects from one to policy to another.

Incentivized

• The web interface has gotten better over the years, but some functionality is still being handled via shell commands.
• SSL setup can be simplified into one place instead of having to navigate to multiple pages and update different key-stores or wallets.
• Migrating and or replicating between versions can be more intuitive with a side-by-side comparison of schema/attributes.

Incentivized

Integration with F5 BIG-IP systems that we plan to keep using for a while.

Incentivized

If F5 BIG-IP Access Policy Manager usability is fine it's not hard to use if you read the documentation but it does feel dated and could use a responsive design update to modernize user interface to current standards.

Incentivized

Oracle cloud services meets most of our needs. I hope in the future we could look at more of the OIG functions included so we could move away from needing to stand up that component.

Incentivized

We have contacted Oracle support a few times regarding admin access queries and every time we received prompt replies and help. In my experience, we only contacted 2 times in 3 years. I think it's because of ease of use and manageability. Also, Oracle Identity Cloud Service customer care team was pretty fast and helpful.

Incentivized

It is open platform so support is not good and than F5 and features visibility as not good as F5. F5 Set up and easy to use to admin console. Also have more feature visibility for load balancing, web server accelerator, application server ddos protection and WAF. F5 more efficient to handle concurrent request.

Incentivized

I believe we had a quite fair RFP listing all our complex integration and being key on utilizing existing investments, the Oracle product met our requirements and the local partner presented that very well. With such combined synergy, the offering was appealing to be the winning bid and therefore Oracle Identity Management was selected.

Incentivized

I hope at some point we could get away from needing to "bring our own" licenses and just have a unique user login rate.

Incentivized

Oracle provided various services we could take advantage of to get the environment configured correctly without needing to hire contractors.

Incentivized

• Simplified our approach to company-wide VPN solutions greatly by allowing us to use a single product instead of multiple products like we had before
• Can handle 15000-20000 users at once with no issues
• Was able to configure to support users travelling with 4G connections on their laptops and accommodate constant changing IP addresses

Incentivized

• I'm not sure we've seen actual ROI by implementing this product. We had many efforts to look at alternatives and to evaluate newer versions (OIG). In the end, we decided to replace it with Sailpoint.

Incentivized