EmpowerID Identity Governance vs Evolveum midPoint

EmpowerID Identity Governance manages identity lifecycles and access across cloud, on-premises, and SAP environments. It handles joiner, mover, and leaver changes, access requests, certifications, reviews, roles, delegated administration, and separation-of-duties remediation. The platform continuously compares actual access with policy, applies governed changes, and records policy, approval, fulfillment, remediation, and verification evidence. Automatic recalculation and fulfillment updates compliant access as people change roles or leave. EmpowerID lists more than 300 pre-built connectors, including Active Directory, Azure or Entra ID, SAP, Salesforce, ServiceNow, Workday, AWS, Oracle, and Windows Server. Supported protocols include SAML 2.0, OpenID Connect, SCIM 2.0, and OAuth 2.0. The Identity Fabric can run as SaaS or in customer data centers, private, public, or sovereign clouds in dedicated single-tenant environments. It is self-hosted and web-accessible. Pricing is on request. Cloud Identity Service customers need the Cloud Gateway app on at least one on-premises Windows computer.

Evolveum midPoint is an open source identity management and governance system for synchronizing identity repositories, managing roles and permissions, and governing access. It can automatically create and manage user accounts, groups, and organizational units. Users can request application access through a role catalog, with policies routing requests for approval before roles are assigned. Access certification campaigns let reviewers assess whether access remains necessary and support remediation. Administrators can inspect an audit trail of operations involving identity objects, roles, policies, and configuration. The connector catalog includes LDAP, Active Directory, database tables, and CSV files, among other sources. MidPoint is a Java application that can be deployed on Linux, Windows, or macOS; Linux is recommended, and macOS is not supported for production use. For version 4.10 and later, PostgreSQL is the only supported production database. The plan is free, with no license fee, but clustering and selected features require an active support subscription. Evolveum also offers paid third-level product support, with Product Support service levels of 8×5 next business day or 24×7.