Skip to content
SPECIFICTION
Get listed

Evolveum midPoint

evolveum.com

Free plan Open source WebWindowsmacOSLinuxAPISelf-hosted
Visit evolveum.com
Spec score 8.8 #1 of 26 in Identity Governance and Administration Software

What it is

Evolveum midPoint is an open source identity management and governance system for synchronizing identity repositories, managing roles and permissions, and governing access. It can automatically create and manage user accounts, groups, and organizational units. Users can request application access through a role catalog, with policies routing requests for approval before roles are assigned. Access certification campaigns let reviewers assess whether access remains necessary and support remediation. Administrators can inspect an audit trail of operations involving identity objects, roles, policies, and configuration. The connector catalog includes LDAP, Active Directory, database tables, and CSV files, among other sources. MidPoint is a Java application that can be deployed on Linux, Windows, or macOS; Linux is recommended, and macOS is not supported for production use. For version 4.10 and later, PostgreSQL is the only supported production database. The plan is free, with no license fee, but clustering and selected features require an active support subscription. Evolveum also offers paid third-level product support, with Product Support service levels of 8×5 next business day or 24×7.

Spec sheet

What it does
midPoint is an identity management and governance platform that synchronizes identity repositories, manages accounts and entitlements, and automates governance processes.Read 15 Oct 2026 · docs.evolveum.com
Product
midPoint is an open source identity management and governance system for synchronizing identity repositories, managing roles and authorizations, and governing identities.Read 7 Oct 2026 · docs.evolveum.com
Intended users
Evolveum describes midPoint as an identity governance and administration platform used by organizations of various types and sizes.Read 7 Oct 2026 · evolveum.com
Deployment
MidPoint is a Java application that can be deployed on Linux, Windows, or macOS; Linux is recommended, while macOS is not supported for production use.Read 7 Oct 2026 · docs.evolveum.com
Integrations
The connector catalog lists supported connectors for LDAP, Active Directory, database tables, and CSV files, among others.Read 7 Oct 2026 · docs.evolveum.com
Security
Evolveum says security issues receive its highest priority regardless of whether the reporter is a subscriber.Read 7 Oct 2026 · docs.evolveum.com
Support
Evolveum offers paid support subscriptions for third-level product support, with listed service levels of 8×5 next business day or 24×7 for Product Support.Read 7 Oct 2026 · evolveum.com
License
The source code is publicly available under the OSI-approved Apache open-source license.Read 15 Oct 2026 · docs.evolveum.com
Headquarters
Lozorno, SlovakiaRead 28 Sep 2026 · evolveum.com
Founded
2011Read 28 Sep 2026 · evolveum.com
Company
Evolveum says it was established in 2011 and gives its EU postal address in Lozorno, Slovakia.Read 7 Oct 2026 · evolveum.com
Access certification
The feature set includes access certification reviews intended to remove unnecessary access.Read 15 Oct 2026 · docs.evolveum.com
Access requests
Users can request application access through a role catalog, and policy can route requests for approval before approved roles are assigned.Read 7 Oct 2026 · docs.evolveum.com
Access reviews
Access certification campaigns let reviewers assess whether user access is still needed and support remediation of decisions.Read 7 Oct 2026 · docs.evolveum.com
API formats
REST examples are documented in XML, JSON and YAML representations.Read 15 Oct 2026 · docs.evolveum.com
Auditing
Auditing can write machine-processable records to log files or database tables, but logfile auditing is off by default.Read 15 Oct 2026 · docs.evolveum.com
Company facts
LinkedIn lists Evolveum as privately held, founded in 2011, headquartered in Lozorno, Slovakia, with 51–200 employees.Read 15 Oct 2026 · linkedin.com
Company ownership
Evolveum says it was bootstrapped without external investors and is owned by three Slovak holding companies.Read 15 Oct 2026 · evolveum.com
Connectors
Identity connectors communicate with target systems through native protocols such as LDAP, SQL and REST.Read 15 Oct 2026 · docs.evolveum.com
Documentation depth
Public documentation covers configuration, customization, maintenance, interfaces, security and a full midPoint book.Read 15 Oct 2026 · docs.evolveum.com
Installation methods
Installation is available through recommended containers, traditional distribution packages or building from source.Read 15 Oct 2026 · docs.evolveum.com
Java client
A Java client library mirrors the REST API and is designed for third-party applications, command-line tools and web forms.Read 15 Oct 2026 · docs.evolveum.com
Java client limitation
The documented Java client library is marked partially implemented and may require subscription funding to finish parts.Read 15 Oct 2026 · docs.evolveum.com
License management
midPoint can manage application and cloud-service licenses and report their usage efficiency.Read 15 Oct 2026 · docs.evolveum.com
Licensing
The documentation says midPoint is available under the Apache License and European Union Public License.Read 7 Oct 2026 · docs.evolveum.com
Limit: feature backlog
Evolveum warns that unfunded feature requests may wait several years because subscriber work receives priority.Read 15 Oct 2026 · docs.evolveum.com
Limit: Gartner reviewer
The same Gartner review says high-availability features require a contracted Evolveum support arrangement.Read 15 Oct 2026 · gartner.com
Limit: subscription features
Without an active subscription, clustering, generic repository support and removal of GUI, email and report footer messages are restricted.Read 15 Oct 2026 · evolveum.com
Named integrations
Evolveum highlights connectivity with Active Directory, Office 365 and Google Workspace.Read 15 Oct 2026 · evolveum.com
Open-source scope
Evolveum states that midPoint has no hidden open-core components and that all functionality is published under open-source licenses.Read 15 Oct 2026 · docs.evolveum.com
Password policy
Password policies validate complexity requirements and can generate compliant passwords.Read 15 Oct 2026 · docs.evolveum.com
Platform support
Linux is the recommended and fully supported production platform; Windows production support is limited to LTS releases and macOS is not production-supported.Read 15 Oct 2026 · docs.evolveum.com
Praise: Capterra users
Reviewers praised Evolveum’s expertise, responsiveness, customer service and the ability to provision users, groups and entitlements across systems.Read 15 Oct 2026 · capterra.com
Praise: Gartner reviewer
A Gartner reviewer highlighted broad integrations, including Office 365, no licensing fee and available support from Evolveum or partners.Read 15 Oct 2026 · gartner.com
Production database
MidPoint 4.10 and newer support PostgreSQL as the only database for deployment.Read 7 Oct 2026 · docs.evolveum.com
Provisioning
It can automatically create and manage user accounts, groups, and organizational units.Read 7 Oct 2026 · docs.evolveum.com
Rating on Capterra
5.0 out of 5 from 4 reviewsRead 15 Oct 2026 · capterra.com
Rating on Gartner Peer Insights
4.3 out of 5 from 6 ratingsRead 15 Oct 2026 · gartner.com
Rating on TrustRadius
5 out of 10 from 1 reviewRead 15 Oct 2026 · trustradius.com
Release status
The download page listed midPoint 4.10.5, released September 8, 2026, as supported through November 26, 2027.Read 15 Oct 2026 · evolveum.com
REST API
The supported HTTP REST API exposes most midPoint functionality through web-resource endpoints.Read 15 Oct 2026 · docs.evolveum.com
Role-based access control
Roles can compute user privileges and entitlements from assignments and memberships.Read 15 Oct 2026 · docs.evolveum.com
Security advisory
A June 2, 2026 advisory described a critical privilege-escalation flaw involving audit-log access and exposed session identifiers.Read 15 Oct 2026 · docs.evolveum.com
Security encryption
Sensitive database values such as passwords are encrypted, while encryption keys are kept in a Java keystore outside the database.Read 15 Oct 2026 · docs.evolveum.com
Security limitation
The security guide advises restricting access to midPoint remote services to trusted entities because their use can affect service availability.Read 7 Oct 2026 · docs.evolveum.com
Self-hosting
midPoint is designed for deployment on customer-controlled infrastructure, including Docker and Kubernetes.Read 15 Oct 2026 · docs.evolveum.com
Subscription features
An active support subscription is required for production use of features including clustering and support for a generic repository database.Read 7 Oct 2026 · evolveum.com
Support model
Evolveum support subscriptions provide third-line bug support, while platform subscriptions can include fourth-line feature development and roadmap influence.Read 15 Oct 2026 · evolveum.com
Synchronization
midPoint synchronizes and reconciles identity data across multiple databases and systems.Read 15 Oct 2026 · docs.evolveum.com
System memory
The installation guide says a small evaluation installation needs approximately 4 GB of RAM.Read 15 Oct 2026 · docs.evolveum.com
User provisioning
The platform can automatically create and manage user accounts, groups, organizational units and related identities.Read 15 Oct 2026 · docs.evolveum.com
Workflow automation
A built-in process engine can automate approval workflows for access requests.Read 15 Oct 2026 · docs.evolveum.com

Plans and prices

Community midPoint Free open-source functionality · no license fee Read 15 Oct 2026 · evolveum.com
midPoint Free Open source; no license fee · clustering and selected features require an active support subscription Read 7 Oct 2026 · evolveum.com
Academic Subscription Priced on request institution-wide plan · no per-user licensing · support · training · clustering Read 15 Oct 2026 · evolveum.com
Evolveum support subscription Priced on request commercial support · bug fixes · optional feature development · clustering for subscribers Read 15 Oct 2026 · evolveum.com

Every Evolveum midPoint plan and price →

Strong points and limits

Strong points

  • Automatically manages accounts, groups, and organizational units.
  • Role catalog supports access requests and approvals.
  • Certification campaigns help review and remediate access.
  • Audit trail covers identity, policy, and configuration operations.
  • Open source with no license fee.

Limits

  • Clustering requires an active support subscription.
  • macOS is not supported for production use.
  • PostgreSQL is the only production database for version 4.10 and newer.
  • Remote services should be restricted to trusted entities.

Who it suits

MidPoint suits organizations that need identity synchronization, lifecycle provisioning, access requests, and reviews. It may fit teams prepared to deploy and administer a Java application and arrange paid support for subscription-required features.

Evolveum midPoint in depth

Read the full write-up

Evolveum midPoint is an open-source identity governance and administration system for organizations that need to synchronize identity data and govern access. It suits teams with the capacity to deploy and operate a Java application. Its breadth is compelling, but production database and subscription requirements deserve close attention.

Overview

MidPoint connects identity repositories with account management, role assignment, access requests, reviews, and auditing. Organizations can use it to automate identity administration and apply governance controls around who receives access and whether that access remains appropriate. Its Apache License and European Union Public License support use without a license fee; that does not remove the operational requirements or subscription conditions for selected production features.

Evolveum positions midPoint for organizations of varied types and sizes. The practical fit depends less on organization size than on whether a team can run the application and meet its production requirements.

Key features

Provisioning and synchronization: MidPoint can create and manage user accounts, groups, and organizational units, and supports directory synchronization. Its connector catalog includes LDAP, Active Directory, database tables, and CSV files, giving identity teams several common systems and data sources to connect.

Access requests: Users can request application access through a role catalog. Policy can route requests for approval before approved roles are assigned, making access decisions more structured than ad hoc account changes.

Access reviews: Certification campaigns let reviewers assess whether access is still needed and support remediation. This is useful for organizations that need a recurring review process, not just initial approval.

Audit trail: MidPoint records operations involving identity objects, roles, policies, and configuration for administrator review. This provides a record of governance activity, although organizations remain responsible for restricting access to the system itself.

Authentication and lifecycle: SAML 2.0 and TOTP are supported, alongside lifecycle provisioning. Evolveum's security guide advises limiting access to remote services to trusted entities because their use can affect service availability.

Pricing

The midPoint plan costs free and provides the open-source software with no license fee. That makes it a strong option for organizations willing to supply the deployment, administration, and infrastructure themselves. Clustering and selected features require an active support subscription, so the free license should not be mistaken for subscription-free access to every production capability.

Evolveum sells paid support subscriptions for third-level product support, with Product Support service levels of 8×5 next business day or 24×7. Security issues receive Evolveum's highest priority whether or not the reporter subscribes, but that is distinct from the paid product-support service.

Platforms

MidPoint is a Java application deployable on Linux, Windows, or macOS, with Linux recommended. macOS is not supported for production use. For midPoint 4.10 and newer, PostgreSQL is the only supported deployment database. Although generic repository database support is included among features requiring an active support subscription, teams should not assume that it changes the stated production database constraint for those versions.

The platform range also includes API, web, and self-hosted use. That flexibility does not make every operating system equally suitable for production.

Who it's for

MidPoint is a good fit for organizations seeking provisioning, directory synchronization, access requests and reviews, and an auditable governance workflow in one open-source system. It is especially attractive to teams comfortable operating Java software and PostgreSQL in production, and able to evaluate which capabilities require a support subscription.

It is a weaker choice for teams that want a managed service, production deployment on macOS, or a database other than PostgreSQL for midPoint 4.10 and newer. Those constraints can outweigh the license savings when local operating capacity is limited.

Pros and cons

Pro — No license fee: The open-source midPoint plan costs nothing, letting organizations avoid a software license charge.

Pro — Connected governance workflow: Provisioning, role-based requests, approval routing, certification campaigns, remediation, and audit records cover multiple stages of access administration.

Pro — Broad connector coverage: The catalog includes LDAP, Active Directory, database tables, and CSV files.

Con — Production database constraint: MidPoint 4.10 and newer support PostgreSQL as the only database for deployment.

Con — Subscription boundary: Clustering and selected features require an active support subscription, so some production needs add ongoing cost.

Con — Operational responsibility: Teams deploy and operate the application themselves, and macOS is not supported for production.

Alternatives

Soffid Identity Governance Administration is worth considering if you want another open-source option with free binary downloads, or a free trial before choosing a paid arrangement. Binary downloads are free but require registration; source code downloads do not.

Okta Lifecycle Management may suit teams looking for a paid lifecycle-management plan with a stated per-user price: Essentials is $17 a month, billed per user/month and annually, with 50 Workflows and a $1,500 annual contract. Choose it only if those terms fit your purchasing and workflow needs.

Corma offers a free plan with identity-provider connection, a browser extension, SSO connection, and 10 apps; its Essential plan is €3 a month, billed on annual terms. It may suit a reader whose needs fit that stated app cap and feature set.

Oracle Cloud Infrastructure Secret Management is a separate option for readers evaluating secret management rather than midPoint's identity governance and provisioning focus.

RSA Authenticator (SecurID) is another alternative to consider when comparing authentication products.

AccessVerity may appeal to smaller teams looking for a web-based access-request and audit product: its Starter plan is $21.25 a year, billed $255 yearly, and covers up to 10 employees with unlimited applications.

SailPoint IdentityIQ is another identity governance option; its term subscription typically uses three-year contracts with annual billing upfront, with price depending on factors including the number of digital identities.

Stitchflow offers a free plan that includes building and testing the first workflow in your environment, while its Ongoing plan costs $1,000 a month. It may suit readers evaluating a workflow-focused alternative.

Browse more options in Identity Governance Software and Identity and Access Management Software.

Verdict

Choose midPoint if your organization needs broad identity governance and provisioning without a license fee, and has the operational capacity to run Java software with PostgreSQL in production. Its integrated request, review, remediation, and audit capabilities are the strongest reason to choose it. Look elsewhere if production database flexibility, macOS support, managed operations, or subscription-free clustering is essential.

Verdict

MidPoint combines provisioning, access governance, and auditing in a no-license-fee open source system. Production deployment has specific database and platform constraints, while clustering and selected features require a support subscription.

Where Specifiction places it

Alternatives to Evolveum midPointAll alternatives →