easyIGA: Identity Governance Your People Can Use, on midPoint
We build easyIGA — our own identity governance product on top of Evolveum midPoint. Access requests, approvals and access reviews in business language, with the evidence recorded automatically. Self-hosted on your infrastructure. Now onboarding design partners.
What easyIGA is
easyIGA is a business-facing layer on a running Evolveum midPoint. midPoint stays the engine: connectors, provisioning, policy, the authoritative identity data. easyIGA gives the people outside the IAM team a place to do four familiar things without specialist help.
Everything is recorded as it happens, and the audit evidence can be exported when the auditor arrives. Specialists keep the technical controls in midPoint. Nothing about the engine changes: standard midPoint, every midPoint feature, every midPoint connector.
One product, one requirement
easyIGA requires a running midPoint. That single fact decides your path.
Where easyIGA stands today
We are open about the stage. easyIGA is in its design-partner phase: the product exists and is demonstrated live on example data, and we are onboarding a small number of organisations that want to shape it against their real access decisions. It has no production customer references yet.
Pricing is an annual subscription per governed identity with deployment included in the agreed scope; the final tier prices are being set and will be published on easyiga.com.
Two things are planned and not yet shipped, and we say so wherever they come up: writing and simulating separation-of-duties rules inside easyIGA (today easyIGA shows the conflicts your midPoint policies report), and a natural-language assistant.
Why we built it
Deployment and support
- Self-hosted by default, on your infrastructure and in your jurisdiction: a container runtime and PostgreSQL. An EU-hosted deployment operated by our team is available on request.
- Pilot first. A named population and a small set of applications, with acceptance criteria agreed in writing, including how missing data and an unavailable target system are handled.
- Deployed and supported by the We Know Identity team.
- Integrations. easyIGA uses midPoint’s connectors. We start from an existing connector before building anything new, and build custom connectors when needed.
- Your identity provider stays. Sign-in and MFA remain with Entra ID, Keycloak or whichever IdP you run; easyIGA governs who gets access, your IdP proves who people are.
Compliance, stated carefully
Access governance is part of the safeguards organisations use under NIS2, DORA, CER and GDPR, and ISO/IEC 27001 expects it. easyIGA keeps access decisions and their recorded outcomes traceable, which supports that work. No product establishes compliance by itself, and easyIGA currently holds no SOC 2 report or ISO 27001 certification of its own. We say that plainly because the evaluation deserves it. Detailed, article-level guides are on easyiga.com: NIS2, DORA, GDPR.
Independent of Evolveum
We Know Identity is an independent company. easyIGA is built on Evolveum midPoint; no Evolveum partnership or endorsement is implied, and Evolveum’s published references are not our customers. Some midPoint capabilities (simulations, high-availability clustering, a database other than PostgreSQL) need an Evolveum subscription, which we arrange and include in a quote.
Frequently asked questions
Does easyIGA replace midPoint?
No. easyIGA requires a running Evolveum midPoint and builds on it. midPoint remains the engine for connectors, provisioning and policy; easyIGA is the governance experience on top.
We don’t have midPoint. Can we still get easyIGA?
Yes, by building the foundation first. Our services team implements midPoint, including migration from SAP IdM, Microsoft MIM and other legacy platforms, and the deployment is easyIGA-ready from the start.
Is easyIGA a cloud service?
It is self-hosted by default, on your own infrastructure. For organisations without suitable infrastructure, an EU-hosted deployment operated by our team is available on request.
What does easyIGA cost?
An annual subscription per governed identity, deployment included in the agreed scope. Final prices are being set and will be published at easyiga.com/pricing. Standard midPoint has no licence fee.
Can we see it before committing?
Yes: a 30-minute live walkthrough on example data with our team, and a scoped pilot with acceptance criteria before any rollout.
Is easyIGA in production anywhere?
Not yet. We are onboarding design partners now and say so openly. Our midPoint services track record is separate and documented on this site, for example in our European telecom operator case study (a midPoint services delivery).
Who is behind easyIGA?
We are: We Know Identity s.r.o., Bratislava, the midPoint implementation specialists. One company behind both the services and the product.
Two ways to start
See easyIGA in a 30-minute walkthrough at easyiga.com. Or, if the midPoint foundation comes first, book a call about your environment and we’ll map the path from where you are to governance your people can use.