Evolveum midPoint vs SailPoint IdentityIQ

Evolveum midPoint is an open source identity management and governance system for synchronizing identity repositories, managing roles and permissions, and governing access. It can automatically create and manage user accounts, groups, and organizational units. Users can request application access through a role catalog, with policies routing requests for approval before roles are assigned. Access certification campaigns let reviewers assess whether access remains necessary and support remediation. Administrators can inspect an audit trail of operations involving identity objects, roles, policies, and configuration. The connector catalog includes LDAP, Active Directory, database tables, and CSV files, among other sources. MidPoint is a Java application that can be deployed on Linux, Windows, or macOS; Linux is recommended, and macOS is not supported for production use. For version 4.10 and later, PostgreSQL is the only supported production database. The plan is free, with no license fee, but clustering and selected features require an active support subscription. Evolveum also offers paid third-level product support, with Product Support service levels of 8×5 next business day or 24×7.

SailPoint IdentityIQ is an identity-security platform for complex enterprises, covering identity lifecycle management and compliance. Compliance Manager automates access certifications, policy management, and audit reporting. Lifecycle Manager supports self-service access requests and provisioning for joiner, mover, and leaver events. AI and machine learning capabilities provide access insights, role modeling, and recommendations for reviewers. SailPoint documents more than 100 out-of-the-box connectors across enterprise applications, IT service management, privileged access, cloud collaboration, and security and risk. APIs and a plugin framework allow customers and partners to extend the platform. IdentityIQ is customer-hosted, on premises or in the cloud, and is listed for Android, iOS, web, API, and self-hosted use. Pricing is available on request; the term subscription is typically a three-year contract billed annually upfront, with price depending partly on the number of digital identities governed. SailPoint says implementations can be complex and require identity-governance and target-system knowledge, and professional services are billable.