Should Oracle be on your Web CMS shortlist?


OracleOracle is among the largest global enterprise software vendors and like IBM and Microsoft, Oracle entered the CMS marketplace via an acquisition (Stellent in 2007). Oracle Universal Content Management (UCM) is based on the original Stellent product now fully rebranded, much improved and leading the market according to IT analyst Gartner. Does this make Oracle an obvious and safe candidate on your Web CMS shortlist?

We find that Oracle UCM does not come up often in standalone Web CMS selections, which is why it did not appear on our 2009 CMS Shortlist. According to Oracle sales pitches, the product has experienced increased adoption in recent years. As the Oracle customer list is very long and Oracle is known for upselling to the install base and for including UCM in larger deals, this sounds plausible.

Depending on your specific requirements, there are several reasons which might make Oracle a meaningful inclusion on your shortlist.

  • Oracle has continued to invest engineering resources in the product and made several recent improvements to the WCM part of UCM including usability, personalisation and accessibility.
  • As a large software vendor, you may already have a strong existing relationship with Oracle. If this the case, your stakeholders will probably appreciate getting a proposal from Oracle.
  • If you have a strong requirement to manage non-web content, eg. documents, this will play well with the product's strengths.

Before you go ahead and add Oracle UCM to the shortlist here's a few bullets for your consideration:

  • License and implementation cost will require a serious budget. The starting price is either US $115k  per-CPU or $2,300 per system user. Moreover, Oracle implementation partners are not known for attractive hourly rates.
  • Usability might have been improved, but still existing customers on the newest version of the product are so frustrated with poor usability that they publish commentaries like Oracle, can you improve your poor usability please? by Mark Morrell at BT.
  • You will need to learn the proprietary "Idoc Script" language for Site Studio until 11g release comes out.
  • UCM is a complex product and will be overkill for many scenarios.

Oracle is planning to release the much-anticipated 11g version of Oracle UCM later this year, which we look forward to studying closer. In the mean time, consider talking to Oracle on getting more information about what's coming.

Thanks to @erikmhartman, @irina_guseva, @TonyByrne and @vesterli for valuable input.


Janus Boye
CEO and Group moderator

As founder and managing director at J. Boye, Janus has grown the business from an office at home in 2003 to an international operation today with members in Europe and North America.

Janus is a frequent speaker at industry events and chairs the renowned J. Boye Conferences held since 2005 in Denmark and since 2009 in Philadelphia, US. Among the organisations that have recently called upon Janus' expertise are  local government agencies, the UN in New York and companies such as Brother, Carlsberg and Red Bull.

5 Responses to “Should Oracle be on your Web CMS shortlist?”

  1. Kas Thomas says:

    I would add another precautionary bullet point, having to do with the rights model. Study the UCM roles and rights model carefully and compare it against your requirements; that’s my advice. Maybe @bex or someone with deep UCM experience can educate me here, but I find the UCM rights model a tad unconventional. It defines a security group as a collection of files (not users). It maps rights to roles, then users to roles. Each security group is accessible to appropriately privileged roles.

    If you create more than 50 security groups, system performance (initially at the admin level, but eventually at the user level) begins to take a hit, at which point Oracle suggests you turn on a feature called Accounts, which is a more granular, hierarchical permissions model. But if you choose to enable “Accounts,” you can’t go back to a non-accounts-enabled model without losing data (according to Oracle’s own documentation).

    The whole thing seems a bit scary to me, but maybe that’s because I don’t understand it, which is not infrequently the case with things that scare me. ;)

  2. Alan Baer says:

    A reply to Kas from Alan Baer of Oracle:

    While Oracle’s terminology may be a bit quirky, I think our security functionality is a strength.

    The basic UCM security models are pretty standard. We classify content (security groups) and we put users into groups (roles). Then we provide a way to configure what content classifications each group of users has access to, and what level of access. On the user side, we have extensive support for all major directories (LDAP, Active directory, etc.) and authentication products, so the user grouping and single sign-on is typically pulled from a “standard” external source.

    While it would be possible do away with security groups and apply user groupings directly to content (some Content Management products do take this approach) we believe this ultimately creates problems similar to ACLs. If you later decide to change how users are organized – something that’s certainly not uncommon – then all documents need to be touched. In the UCM model, they don’t.

    We think it’s an advantage to offer a simple model (security groups) as well as a more granular model (accounts), and you describe the differences well. I agree that the wording in the docs about “losing data” is way too frightening, not to mention inaccurate. In reality, no data will ever be lost. Under certain conditions, after turning off accounts users may not be able to access certain content items until the administrator makes some metadata changes, but these changes are easily made.

    We’ll remove the reference to “losing data” from the documentation and describe more specifically what administrators should do prior to turning off accounts. This way customers can understand what will happen without being scared away – and analysts needn’t be “precautionary” on this point.

  3. bex says:


    Alan is correct in that the documentation is giving you an overly stern warning. If you make a major change to the security model, your users will get the PERCEPTION of data loss, because now they don’t have sufficient rights to access their content… The content is still there, just too secure to be seen. You just need to update the users’ access rights, and everything should be fine.

    This did inspire me to write a blog post on the origin of the UCM security model, tho… Hopefully you find it informative.

  4. [...] my views were shared.  I’m not alone!  It has led to Oracle re-engaging with Janus Boye (read his blog post on Oracle) and me.  There is no guarantee this will lead to anything so how can we improve the usability of [...]

  5. [...] Oracle UCM improvement wish list By markmorrell Oracle is aware of Janus Boye and my blog posts and tweets on Twitter about Oracle usability issues.  Oracle want to help [...]

Leave a Reply

Most popular posts from our blog
August 12, 2009 by Janus Boye
Selecting the right CMS is not an easy task with; there is in excess of 1,000 vendors in the very dynamic CMS…
February 16, 2010 by Janus Boye
All modern CMS vendors claim to be capable of delivering content to mobile devices. Some even offer additional modules to make the…
March 21, 2011 by Janus Boye
You may be impressed by some of the features during a CMS product presentation, but in reality many of the features that…
Recent comments
April 8, 2014 by Bertrand
I would include the Apache Sling website in this list ( ) as it's what powers AEM. Understanding the…
April 8, 2014 by Scott Liewehr
Great resource, Janus. And thanks for the mention.
March 15, 2014 by John
Their site may not even be a CMS but more of a custom built web application. Also, how do you…