Evolveum midPoint vs Saviynt Enterprise Identity Cloud

Evolveum midPoint is an open source identity management and governance system for synchronizing identity repositories, managing roles and permissions, and governing access. It can automatically create and manage user accounts, groups, and organizational units. Users can request application access through a role catalog, with policies routing requests for approval before roles are assigned. Access certification campaigns let reviewers assess whether access remains necessary and support remediation. Administrators can inspect an audit trail of operations involving identity objects, roles, policies, and configuration. The connector catalog includes LDAP, Active Directory, database tables, and CSV files, among other sources. MidPoint is a Java application that can be deployed on Linux, Windows, or macOS; Linux is recommended, and macOS is not supported for production use. For version 4.10 and later, PostgreSQL is the only supported production database. The plan is free, with no license fee, but clustering and selected features require an active support subscription. Evolveum also offers paid third-level product support, with Product Support service levels of 8×5 next business day or 24×7.

Saviynt Enterprise Identity Cloud (EIC) manages and governs human and non-human access to an organization's applications, data, and business processes. It combines identity governance and administration, privileged access management, third-party access governance, and application access governance. The platform automates identity lifecycle, certification, and segregation-of-duties processes for workforce, supplier, vendor, service, privileged, and application identities. An identity and entitlement warehouse uses AI and machine learning to add risk context and recommend process actions. Saviynt Exchange lists 406 apps, including connectors for Microsoft Entra ID, Salesforce, Google Workspace, and GitHub. Custom connectors are supported, but the framework counts toward licensed app totals; partner-developed connectors are sold separately. EIC uses a cluster-based, multi-tenant architecture with isolated data, networks, and services, plus automatic updates. It supports customer-provided encryption keys and vaults. Saviynt describes data residency in more than 25 regions and lists security certifications or attestations including SOC 1 and SOC 2 Type II, ISO 27001:2022, ISO 27017:2015, FedRAMP Moderate, and PCI-DSS. Pricing is on request.