Evolveum midPoint

Overview

midPoint, by Evolveum, is the leading open-source identity governance (IGA) platform, with strong provisioning, role management, organizational structure, and certification features. Founded in 2011 and based in Slovakia, it is widely adopted across public sector, academia, and enterprises that want capable governance without per-identity license fees.

What it is good at

For an open-source project, midPoint is unusually complete. It covers provisioning, role and organizational management, policy, and access certification at a depth that rivals commercial tools, backed by an active community and thorough documentation, with no license cost. Self-hosting and deployment flexibility are total, which suits public-sector and academic mandates for on-premises control and data sovereignty, and the transparent open model is itself a procurement advantage.

Where it falls short

The trade-off is operational. You run, tune, and upgrade midPoint yourself (or buy a subscription for support and managed services), and the UX is functional rather than polished. Authentication and MFA are out of scope. Teams wanting a turnkey SaaS with minimal operations and vendor-managed everything will find a commercial platform a better fit.

Pricing

Free open-source core; paid subscriptions for support, guaranteed fixes, and managed services. Because there is no per-identity license, model the total cost (including operations) with the TCO calculator.

Best for, and who should look elsewhere

Choose midPoint where self-hosting and zero license cost matter, especially in public sector and academia. For commercial enterprise suites, see SailPoint vs Saviynt; for modern cloud-first governance, see ConductorOne.

Bottom line

The strongest open-source IGA, unusually complete on provisioning and governance, ideal where self-hosting and zero license cost outweigh the operational effort.