Amazon Cognito vs. OCI Identity and Access Management

Well Suited

1. B2C mobile and web apps with a high number of users.
2. Cheaper and cost-effective.
3. If the other pieces of the infra are already using AWS services like Lambda, S3, Pinpoint, etc.

Not Suited For:

1. Advanced use-cases (Biometrics based authentication) Email, and other MFA channels.
2. For any use-cases needing SCIM.
3. Customized flows of SSO, and MFA will need a layer on Lambda and other AWS services.

Incentivized

We are using this for our resident facing applications. Areas they need to improve is building in more of the OIG functionality into their cloud service. This hinders us for managing identities that require multi-value attributes.

Incentivized

• Strong integration with React.js and client-side applications
• Easy to bridge Cognito identities with the rest of the AWS ecosystem
• Easy to store user profile data directly in Cognito rather than having to build additional services/endpoints
• Easy integration with AWS Lambda to extend and add sophistication to the service

Incentivized

• OIM was working for us for several years, but we had a lot of custom code we had to write to use it effectively.
• OIA was able to help us perform role and access reviews periodically, in a scheduled fashion.
• The product had an OK user interface.

Incentivized

• SCIM implementation is not present.
• B2B SaaS use-cases are very hard to configure. More suitable or B2C use-cases.
• Needs more recipes, plugins, SDK's.
• 2FA with Email as an OTP channel is not supported.
• 2 FA using biometrics is not available; can be customised using lambda.

Incentivized

• Auto switch to DR (Very key and not yet been experienced or implemented well)
• Ability to connect with other legacy systems
• Mobile friendly

Incentivized

All the features AWS Cognito offers gives the user the options they need without making it too complicated. Your customers will be happy. On the administration site usability is also great. After a small learning curve, you can setup Cognito for your usage

Incentivized

If users are trained properly, they can fully utilize the solution. We have only contacted customer care 2-3 times in the last 3 years. Once everything got set up according to DJSIR regulations that's it, Oracle Identity Cloud Service works flawlessly. We are currently managing 3 IDCS stripes for different teams and the ease of management is very noticeable.

Incentivized

AWS Support overall is poor. Your main resources are trainings and the docs, and the docs can be very confusing. Using Cognito well involves having a developer learn it deeply and help support your team in understanding it. That said, Cognito's competitors also have dismal support and even worse documentation, so while this isn't a strength for Cognito it may still be the frontrunner here.

Incentivized

The support for Oracle Identity Cloud Service is generally good. Nevertheless, it can take some time to get a response from the support team which creates initial frustration, and the customer will have to wait till the SR gets assigned to a support person.

Incentivized

They are ideal tools to create a secure and unique login experience for our applications. Thanks to its API authorization, Amazon Cognito ensures connections to applications that are secure.It is easy to use and provides easy access to files and applications that you need to complete your goal.

Incentivized

Oracle IDCS is a true enterprise-level cloud solution to our organization's needs. Everything is so intuitive that is much easy to follow and learn. The Oracle support and documentation feature is excellent and makes our work easy to do. I see a bright future for this product and continue to see improvements in the product.

Incentivized

• Amazon Cognito has had a positive impact on our business by allowing us to develop services that require user sign-up and sign-in more rapidly. Not only do we not need to build or maintain these features, but Cognito's implementation is also better than what we would be justified in building ourselves.
• Amazon Cognito makes user management easy. This reduces the time we have to spend supporting users. Non-technical product managers can even use the AWS Console to manage users without requiring support from developers.
• Amazon Cognito is likely more secure than what would be built in-house; a portion of our attack surface is now managed by Amazon.

Incentivized

• Oracle Identity Management is a great product, catering to the business needs.
• Not all features of the OIM suite are applicable to all companies, thus having an impact on ROI.
• Overall it is a great product that handles a large company's identity management requirements like a pro.

Incentivized