Most software that address management of identities in a enterprise is bad. The "solutions" sold by CA, Oracle, and Dell are particularly terrible.