Beta Systems Garancy Suite vs Evolveum midPoint

Beta Systems Garancy Suite manages digital identities and access rights through the employee lifecycle. It automates joiner, mover, and leaver processes, supports recurring access recertification, and centrally manages identities, roles, and groups. Rule-based permissions and self-service workflows handle authorization requests and approvals; approved permissions can be provisioned to connected systems through standard connectors or uConnect. Reports show roles, permissions, and risks for compliance work. Its Data Access Governance capability controls unstructured data down to folders and files, including in SharePoint, file servers, and shared mailboxes. Garancy can run on-premises or in the cloud, with subscription or one-time purchase licensing; no prices are stated. Integrations include ServiceNow, while release 26.1 adds SMART SCIM Connect for SCIM 2.0 applications, including AWS, Salesforce, Atlassian, OpenAI, and Anthropic. The product identifies compliance requirements including NIS-2, DORA, ISO 27001, the IT Security Act (KRITIS), BSI IT-Grundschutz, and TISAX. Its implementation process is described as five steps from kickoff to go-live, presented as ready to launch in 10 weeks.

Evolveum midPoint is an open source identity management and governance system for synchronizing identity repositories, managing roles and permissions, and governing access. It can automatically create and manage user accounts, groups, and organizational units. Users can request application access through a role catalog, with policies routing requests for approval before roles are assigned. Access certification campaigns let reviewers assess whether access remains necessary and support remediation. Administrators can inspect an audit trail of operations involving identity objects, roles, policies, and configuration. The connector catalog includes LDAP, Active Directory, database tables, and CSV files, among other sources. MidPoint is a Java application that can be deployed on Linux, Windows, or macOS; Linux is recommended, and macOS is not supported for production use. For version 4.10 and later, PostgreSQL is the only supported production database. The plan is free, with no license fee, but clustering and selected features require an active support subscription. Evolveum also offers paid third-level product support, with Product Support service levels of 8×5 next business day or 24×7.