The document compares the identity management systems Microsoft Forefront Identity Manager (FIM), Oracle, and CA. It finds that FIM requires more programming skills than Oracle or CA to configure, as it replaces roles and attributes with policy objects and uses workflows to drive synchronization. Oracle and CA are easier to deploy as they require less custom programming and include governance functions that FIM lacks.