Oracle Enterprise Single Sign-On Suite Plus vs. Univention Corporate Server (UCS)

Good if you want a temporary solution to too many passwords.

Incentivized

Univention Corporate Server is well suited:

1. If an Organization would like to use it as a complete Active Directory Server.
2. If an Organization wants to deploy other applications which are important like SSO, Mail Server, 2FA etc., as with one click all these Apps will be integrated magically thus reducing the Admin job considerably.
3. Web based management which will be quite useful for the Admins who are from Windows background only.
4. Univention as a company which has close to 2 decades of experience.

• Flexible to work with most web sites and thick clients
• Avoids users having to type their passwords repeatedly
• Fairly performant

Incentivized

• Complete replacement for MS Active Directory Server.
• Univention App Center - awesome concept with which Apps can be installed for the Domain.
• App Center can be compared to Google Play Store or Apple Play Store - Organizations can gain tremendous advantages.
• Plethora of Apps which are both free and paid and excellent apps for the Organizations.

• This tool is essentially a hack, making the user experience pretty weak. For example, we use it in an application which has a box to type your password. Every time you enter some data, ESSO steals the focus and types your password into the box, even if you aren't about to submit the form requiring the password.
• This tool creates a 2nd CN in the directory and this broke some of our applications which were only expecting a single CN per user in the directory. Why can't it use a traditional database instead?
• This tool caused performance issues with Putty. It would peg our CPUs at 100% if the user had Putty running. It took a very long time to resolve the issue.

Incentivized

• As Univention is from Germany, lot of informative articles are in German but English articles are also good but less in number.

There's no substitute for properly developed applications that delegate authentication to an external system like Active Directory or a cloud identity provider. That way, the issues with screen scraping and constantly-breaking integration are solved permanently.

Incentivized

We have evaluated Zentyal and ClearOS but we found out that UCS is more suited to every Organization.

• We spent a lot of time implementing it on different applications. However, because it uses screen scraping, every time our apps upgraded, it broke the integration with ESSO, so we had to keep fixing the integration. After a few years, we have stopped integrating new apps with it due to this headache.

Incentivized

• As a partner, we have gained lot of respect from our customers as UCS is rock solid.
• UCS is truly Open Source.
• UCS has surpassed our expectations.