AccessOwl vs Evolveum midPoint
AccessOwl
accessowl.com
Evolveum midPoint
evolveum.comSide by side
| Figure | AccessOwl | Evolveum midPoint |
|---|---|---|
| Price from | $1.50/mo | Free |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | Yes |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 5 | 4 |
| Spec score · Identity Governance Software | 8.2 (#5) | 8.9 (#2) |
| Access requests | Employees can request access through Slack or a web dashboard, with requests routed to managers, tool owners, or IT admins. | Users can request application access through a role catalog, and policy can route requests for approval before approved roles are assigned. |
| Access reviews | The access review workflow syncs user lists and permissions, invites reviewers, sends Slack reminders, processes changes, and provides audit evidence. | Access certification campaigns let reviewers assess whether user access is still needed and support remediation of decisions. |
| Company | The legal imprint names Omni Owl GmbH and gives its address as Rheinsberger Str. 76/77, 10115 Berlin, Germany. | Evolveum says it was established in 2011 and gives its EU postal address in Lozorno, Slovakia. |
| Headquarters | Berlin, Germany | Lozorno, Slovakia |
| Integrations | The integrations directory lists 400+ integrations and includes Google Workspace, Microsoft 365, and SaaS provisioning and deprovisioning connections. | The connector catalog lists supported connectors for LDAP, Active Directory, database tables, and CSV files, among others. |
| Product | AccessOwl describes itself as access governance software for automating SaaS access administration across the employee lifecycle. | midPoint is an open source identity management and governance system for synchronizing identity repositories, managing roles and authorizations, and governing identities. |
| Provisioning | It offers automated provisioning and deprovisioning across 400+ apps, including apps without SCIM or SAML support. | It can automatically create and manage user accounts, groups, and organizational units. |
| Security | The Trust Center provides security documentation access and lists SOC 2, data security, application security, access control, infrastructure, and corporate security sections. | Evolveum says security issues receive its highest priority regardless of whether the reporter is a subscriber. |
| Support | The Enterprise plan includes prioritized 24/7 support. | Evolveum offers paid support subscriptions for third-level product support, with listed service levels of 8×5 next business day or 24×7 for Product Support. |
Plans
AccessOwl
- Spend Management Module$1.50 a month
- Account Provisioning Module$2.50 a month
- Basic$4.50 a month
- Growth$6 a month
- EnterprisePriced on request
Evolveum midPoint
- Community midPointFree
- midPointFree
- Academic SubscriptionPriced on request
- Evolveum support subscriptionPriced on request
In their own words
AccessOwl
AccessOwl is paid, web-based access-governance software for managing SaaS administration through employee onboarding, role changes, and departures. It provisions and removes access across 400+ applications, including those without SCIM or SAML. HR events can trigger onboarding and offboarding workflows, with templates for tools and permissions. Employees request access in Slack or a web dashboard, routed to managers, tool owners, or IT administrators. Access reviews synchronize users and permissions, invite reviewers, send Slack reminders, process changes, and create audit evidence for SOC 2 or ISO 27001. Shadow IT discovery scans Google Workspace or Microsoft 365 SSO logs and work-inbox invitations. Spend management tracks costs, unused licences, and renewals. Basic costs $4.50/user/mo with a $250 minimum; Growth costs $6.00/user/mo with the same minimum. A 7-day trial is listed, but there is no free plan.
Evolveum midPoint
Evolveum midPoint is an open source identity management and governance system for synchronizing identity repositories, managing roles and permissions, and governing access. It can automatically create and manage user accounts, groups, and organizational units. Users can request application access through a role catalog, with policies routing requests for approval before roles are assigned. Access certification campaigns let reviewers assess whether access remains necessary and support remediation. Administrators can inspect an audit trail of operations involving identity objects, roles, policies, and configuration. The connector catalog includes LDAP, Active Directory, database tables, and CSV files, among other sources. MidPoint is a Java application that can be deployed on Linux, Windows, or macOS; Linux is recommended, and macOS is not supported for production use. For version 4.10 and later, PostgreSQL is the only supported production database. The plan is free, with no license fee, but clustering and selected features require an active support subscription. Evolveum also offers paid third-level product support, with Product Support service levels of 8×5 next business day or 24×7.