- Home
- Identity Governance Software
- Evolveum midPoint
Evolveum midPoint
Lozorno, Slovakia
What it is
Evolveum midPoint is an open source identity management and governance system for organizations that need to synchronize identity repositories, administer roles, and govern access. It can create and manage user accounts, groups, and organizational units automatically. Users can request application access through a role catalog, with policy-controlled approval before approved roles are assigned. Access certification campaigns let reviewers assess whether access is still needed and support follow-up remediation. Administrators can examine an audit trail of activity involving identity objects, roles, policies, and configuration. Its connector catalog includes LDAP, Active Directory, database tables, and CSV files, among other sources. MidPoint is a Java application deployable on Linux, Windows, or macOS; Linux is recommended, while macOS is not supported for production use. For version 4.10 and newer, PostgreSQL is the only supported production database. The midPoint plan costs nothing, with no license fee. Clustering and selected features require an active support subscription. Evolveum also offers paid third-level support.
For and against
For
- Automates account, group, and organizational-unit management
- Supports access requests and approval policies
- Includes access certification and remediation
- Provides an audit trail for identity activity
- Available under the Apache License and EUPL
Against
- macOS is not supported for production use
- PostgreSQL is the only production database for 4.10 and newer
- Clustering and selected features require a support subscription
The verdict
MidPoint covers provisioning, access requests, reviews, and auditing in an open source system with no license fee. Production users should account for its PostgreSQL requirement and the subscription needed for clustering and selected features.
Who it suits
MidPoint suits organizations seeking identity provisioning, role-based access requests, and access reviews. It is aimed at organizations of various types and sizes, but production deployment choices and subscription-dependent features matter.
Plans and prices
Community midPoint
open-source functionality · no license fee
Read 15 Oct 2026 · evolveum.com
midPoint
Open source; no license fee · clustering and selected features require an active support subscription
Read 7 Oct 2026 · evolveum.com
Academic Subscription
institution-wide plan · no per-user licensing · support · training
Read 15 Oct 2026 · evolveum.com
Evolveum support subscription
commercial support · bug fixes · optional feature development · clustering for subscribers
Read 15 Oct 2026 · evolveum.com
On the record
- Access certification
- The feature set includes access certification reviews intended to remove unnecessary access.docs.evolveum.com · read 15 Oct 2026
- Access requests
- Users can request application access through a role catalog, and policy can route requests for approval before approved roles are assigned.docs.evolveum.com · read 7 Oct 2026
- Access reviews
- Access certification campaigns let reviewers assess whether user access is still needed and support remediation of decisions.docs.evolveum.com · read 7 Oct 2026
- API formats
- REST examples are documented in XML, JSON and YAML representations.docs.evolveum.com · read 15 Oct 2026
- Auditing
- Auditing can write machine-processable records to log files or database tables, but logfile auditing is off by default.docs.evolveum.com · read 15 Oct 2026
- Company
- Evolveum says it was established in 2011 and gives its EU postal address in Lozorno, Slovakia.evolveum.com · read 7 Oct 2026
- Company facts
- LinkedIn lists Evolveum as privately held, founded in 2011, headquartered in Lozorno, Slovakia, with 51–200 employees.linkedin.com · read 15 Oct 2026
- Company ownership
- Evolveum says it was bootstrapped without external investors and is owned by three Slovak holding companies.evolveum.com · read 15 Oct 2026
- Connectors
- Identity connectors communicate with target systems through native protocols such as LDAP, SQL and REST.docs.evolveum.com · read 15 Oct 2026
- Deployment
- MidPoint is a Java application that can be deployed on Linux, Windows, or macOS; Linux is recommended, while macOS is not supported for production use.docs.evolveum.com · read 7 Oct 2026
- Documentation depth
- Public documentation covers configuration, customization, maintenance, interfaces, security and a full midPoint book.docs.evolveum.com · read 15 Oct 2026
- Installation methods
- Installation is available through recommended containers, traditional distribution packages or building from source.docs.evolveum.com · read 15 Oct 2026
- Integrations
- The connector catalog lists supported connectors for LDAP, Active Directory, database tables, and CSV files, among others.docs.evolveum.com · read 7 Oct 2026
- Intended users
- Evolveum describes midPoint as an identity governance and administration platform used by organizations of various types and sizes.evolveum.com · read 7 Oct 2026
- Java client
- A Java client library mirrors the REST API and is designed for third-party applications, command-line tools and web forms.docs.evolveum.com · read 15 Oct 2026
- Java client limitation
- The documented Java client library is marked partially implemented and may require subscription funding to finish parts.docs.evolveum.com · read 15 Oct 2026
- License
- The source code is publicly available under the OSI-approved Apache open-source license.docs.evolveum.com · read 15 Oct 2026
- License management
- midPoint can manage application and cloud-service licenses and report their usage efficiency.docs.evolveum.com · read 15 Oct 2026
