OCI Identity and Access Management

OracleSecurityFree tier available

Authentication and authorisation primitives for OCI — users, groups, policies, dynamic groups (instance principals), and federation. Policy language is Oracle-specific (more declarative than AWS IAM).

Jurisdictional exposure

Provider HQ
USAustin, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations
APACEEAEUUKUSOther58 regions across 6 jurisdictions
Sovereign option
Yes — 12 sovereign-flagged regions available

Attributes

Ga Year
2016

Sub-services (4)

Users and Groups

Native OCI user identities with policy-based group membership

Policies

Oracle-style declarative policy language (`Allow group X to manage Y in compartment Z`)

Dynamic Groups

Instance-principal authentication for OCI Compute / Functions to call other services

Federation

SAML 2.0 federation with external IdPs (Microsoft Entra ID, Okta, AD FS, etc.)

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

58 regions
27 countries
12sovereign
Sovereign regions (12)
  • EU Sovereign Spain (Madrid) · MadridOracle EU Sovereign Cloud
  • EU Sovereign Germany (Frankfurt) · FrankfurtOracle EU Sovereign Cloud
  • US Gov East (Ashburn) · AshburnOracle US Government Cloud
  • US Gov West (Phoenix) · PhoenixOracle US Government Cloud
  • US Federal (Ashburn) · AshburnOracle US Government Cloud
  • US Federal (Chicago) · ChicagoOracle US Government Cloud
  • US Federal (Phoenix) · PhoenixOracle US Government Cloud
  • US DoD East · AshburnOracle DoD Cloud (US)
  • US DoD Central · ChicagoOracle DoD Cloud (US)
  • US DoD West · PhoenixOracle DoD Cloud (US)
  • UK Government (London) · LondonOracle UK Government Cloud
  • UK Government (Newport) · NewportOracle UK Government Cloud
Commercial regions (46)

Europe (12)

  • France South (Marseille)
  • France Central (Paris)
  • Germany Central (Frankfurt)
  • Italy Northwest (Milan)
  • Italy North-West (Turin)
  • Netherlands Northwest (Amsterdam)
  • Serbia Central (Jovanovac)
  • Spain Central (Madrid)
  • Sweden Central (Stockholm)
  • Switzerland North (Zurich)
  • UK South (London)
  • UK West (Newport)

North America (8)

  • Canada Southeast (Montreal)
  • Canada Southeast (Toronto)
  • Mexico Northeast (Monterrey)
  • Mexico Central (Querétaro)
  • US East (Ashburn)
  • US Midwest (Chicago)
  • US West (Phoenix)
  • US West (Salt Lake City)

South America (5)

  • Brazil East (São Paulo)
  • Brazil Southeast (Vinhedo)
  • Chile Central (Santiago)
  • Chile West (Valparaíso)
  • Colombia Central (Bogotá)

Asia (11)

  • India South (Hyderabad)
  • India West (Mumbai)
  • Indonesia Central (Batam)
  • Japan Central (Osaka)
  • Japan East (Tokyo)
  • Malaysia Central (Kulai)
  • Malaysia West 2 (Kulai)
  • Singapore (Singapore)
  • Singapore West
  • South Korea North (Chuncheon)
  • South Korea Central (Seoul)

Oceania (2)

  • Australia Southeast (Melbourne)
  • Australia East (Sydney)

Middle East (6)

  • Israel Central (Jerusalem)
  • Saudi Arabia West (Jeddah)
  • Saudi Arabia Northwest (NEOM)
  • Saudi Arabia Central (Riyadh)
  • UAE Central (Abu Dhabi)
  • UAE East (Dubai)

Africa (2)

  • Morocco Central (Casablanca)
  • South Africa Central (Johannesburg)

Tags

Equivalent services on other platforms

Alibaba Resource Access ManagementAlibaba

Alibaba Cloud's identity and access management service with users, groups, roles, fine-grained JSON policies, SAML 2.0 federation to enterprise IdPs, and Security Token Service for temporary credentials

AWS IAMAWS

Centralised identity and access management with users, groups, roles, and fine-grained JSON policies, MFA enforcement, identity federation, and IAM Access Analyzer

Amazon CognitoAWS

Customer identity and access management service with User Pools for sign-up and sign-in, Identity Pools for federated AWS credentials, social and SAML/OIDC federation, hosted UI, adaptive authentication, and advanced security risk scoring for consumer-scale apps

Microsoft Entra IDAzure

Cloud identity and access management (formerly Azure AD) with SSO, MFA, conditional access, B2B and B2C guest accounts, and privileged identity management

Unity CatalogDatabricks

Unified governance layer for data, analytics, and AI assets across all Databricks workspaces with fine-grained access control, data lineage, audit logging, and cross-cloud federation

Cloud IAMGCP

Fine-grained identity and access management with predefined and custom roles, service accounts, workload identity federation, and audit logging

Huawei Identity and Access ManagementHuawei

Centralised identity management for Huawei Cloud with users, user groups, role-based and fine-grained policies, federated identity via SAML/OIDC, MFA, and temporary credentials through Security Token Service

OpenStack KeystoneOpenStack

Identity, authentication, and service-catalogue service — issues tokens, manages users and projects, federates with external identity providers (LDAP, SAML, OIDC), and exposes the service catalogue every other OpenStack project consumes for endpoint discovery

Identity and Access ManagementT Cloud

Centralised identity provider — users, groups, policies, federated SAML/OIDC SSO with enterprise IdPs, and fine-grained access policies that bind principals to OTC resources via JSON policy documents

Outscale Identity (EIM)Outscale

Experimental Identity Management — IAM with users, groups, policies, federated access via SAML 2.0 / OIDC. AWS IAM-compatible policy syntax. Multi-factor authentication on the management console; access keys for programmatic use.

Scaleway IAMScaleway

Identity and access management with users, groups, applications, API keys, and granular policy-based permissions across all Scaleway resources

Tencent Cloud Access ManagementTencent

Tencent Cloud's identity and access management service with sub-accounts, user groups, roles, fine-grained JSON policies, SAML and OIDC federation, MFA, temporary credentials via Security Token Service, and cross-account role assumption

Pricing

Pricing model:free