Evolveum midPoint vs Soffid Identity Governance Administration

Evolveum midPoint is an open source identity management and governance system for synchronizing identity repositories, managing roles and permissions, and governing access. It can automatically create and manage user accounts, groups, and organizational units. Users can request application access through a role catalog, with policies routing requests for approval before roles are assigned. Access certification campaigns let reviewers assess whether access remains necessary and support remediation. Administrators can inspect an audit trail of operations involving identity objects, roles, policies, and configuration. The connector catalog includes LDAP, Active Directory, database tables, and CSV files, among other sources. MidPoint is a Java application that can be deployed on Linux, Windows, or macOS; Linux is recommended, and macOS is not supported for production use. For version 4.10 and later, PostgreSQL is the only supported production database. The plan is free, with no license fee, but clustering and selected features require an active support subscription. Evolveum also offers paid third-level product support, with Product Support service levels of 8×5 next business day or 24×7.

Soffid Identity Governance Administration (IGA) manages identity lifecycles, including account creation, changes, and deletion. Its governance tools include access requests, approval workflows, certification campaigns, recertification, and audit trails. IGA supports access policies, role-based access control, least privilege, and segregation of duties. It manages internal and external users as well as non-human identities such as applications, APIs, and services. Soffid describes prebuilt connectors for directories, cloud apps, and HR systems, along with a framework for custom integrations. Examples in its JSON REST connector documentation include Jira, Office 365, AWS, Google Cloud, and Oracle Field Service Cloud. Deployment can be on customer servers or as a cloud-based solution. Soffid states it holds ENS High and Common Criteria EAL2 + ALC CCL certifications for identity management and names GDPR and SOX among regulations its capabilities address. Pricing is on request, though binary components are free with registration and source code downloads require no registration. Listed platforms are API, Linux, self-hosted, web, and Windows.