Question 1

What is Evolveum midPoint?

Accepted Answer

Evolveum midPoint is an open-source Identity Governance and Administration (IGA) platform. It handles identity lifecycle management, access provisioning, role-based access control, and compliance reporting for organizations of any size. Unlike commercial IAM platforms, midPoint has no per-user licensing fees and no vendor lock-in.

Question 2

Is midPoint really free? What are the costs?

Accepted Answer

midPoint itself is open-source and free to download and use. The costs come from implementation, customization, and ongoing support. You pay for consulting services to deploy and configure midPoint for your environment, build custom connectors, and train your team. There are no per-user or per-identity licensing fees, which makes midPoint significantly cheaper than commercial alternatives like SailPoint or One Identity at scale.

Question 3

How does midPoint compare to SailPoint, One Identity, or Saviynt?

Accepted Answer

midPoint offers comparable functionality to commercial IGA platforms including full lifecycle management, access certification, role mining, and compliance reporting. The key differences: midPoint is open-source with no per-user licensing, supports Kubernetes-native deployment, and provides full access to source code for customization. Commercial platforms typically offer more out-of-the-box connectors but at significantly higher total cost of ownership.

Question 4

What size organization is midPoint suitable for?

Accepted Answer

midPoint scales from small organizations with a few hundred identities to large enterprises managing over 1,000,000 identities. WeKnowIdentity has delivered implementations across this full range, from mid-size companies with 400 identities to major telecom operators with hundreds of thousands of users and dozens of connected systems.

Question 5

Can midPoint run in the cloud or only on-premises?

Accepted Answer

midPoint supports both cloud and on-premises deployment. It runs natively on Kubernetes, making it ideal for cloud environments (AWS, Azure, GCP) with Helm charts and GitOps-based configuration management. It also runs on traditional infrastructure with Docker or bare-metal installation. WeKnowIdentity specializes in Kubernetes-native midPoint deployments.

Question 6

Why should I hire a midPoint consultant instead of doing it in-house?

Accepted Answer

midPoint is powerful but complex. A certified consultant brings proven deployment patterns, avoids common pitfalls, and delivers production-ready implementations in weeks rather than months. WeKnowIdentity holds 4 Evolveum midPoint certifications and has completed 10+ enterprise deployments, meaning your team benefits from lessons learned across multiple industries and scales.

Question 7

What certifications does WeKnowIdentity hold?

Accepted Answer

WeKnowIdentity founder Jan Minarciny holds 4 Evolveum midPoint certifications: midPoint Professional, midPoint Advanced, midPoint Deployment Specialist, and midPoint Group Synchronization Specialist. Additionally, he holds certifications in Identity Management (IDPro BoK), GitOps (CGOA from The Linux Foundation), and Kubernetes deployment practices.

Question 8

How long does a typical midPoint implementation take?

Accepted Answer

A basic midPoint deployment with HR integration and Active Directory provisioning can be delivered in 4 to 8 weeks. More complex implementations involving multiple source systems, custom connectors, role engineering, and compliance workflows typically take 3 to 6 months. Migration projects from legacy IAM platforms may take 6 to 12 months depending on complexity and the number of connected systems.

Question 9

Do you offer a free initial consultation?

Accepted Answer

Yes. WeKnowIdentity offers a free initial consultation where we assess your current IAM landscape, discuss your requirements, and recommend the right midPoint approach for your organization. Contact us at info@weknowidentity.com or through our website contact form.

Question 10

What industries have you delivered midPoint projects in?

Accepted Answer

WeKnowIdentity has delivered midPoint implementations across telecom, government, finance, healthcare, education, media, and technology sectors. Our projects span Slovakia, Switzerland, Germany, Austria, and Poland, serving both public and private sector organizations.

Question 11

Why should I migrate from SAP IDM or Microsoft MIM to midPoint?

Accepted Answer

SAP Identity Management reaches end of maintenance in December 2027 and Microsoft Identity Manager extended support ends in January 2029. midPoint offers a modern, open-source alternative with full lifecycle management, the ConnId connector framework supporting the same target systems, Kubernetes-native deployment, and no per-user licensing fees. WeKnowIdentity has hands-on experience migrating from both platforms.

Question 12

What systems can midPoint connect to?

Accepted Answer

midPoint uses the ConnId connector framework to integrate with virtually any system: Active Directory, LDAP directories, REST APIs, SOAP services, SCIM endpoints, SQL and NoSQL databases, CSV feeds, HR systems, and proprietary platforms. WeKnowIdentity builds custom connectors for any target system your organization requires.

Question 13

Can you migrate from SailPoint or One Identity to midPoint?

Accepted Answer

Yes. While SAP IDM and Microsoft MIM are the most common migration sources due to their end-of-life timelines, WeKnowIdentity also helps organizations migrate from SailPoint IdentityIQ, One Identity Manager, and other commercial IAM platforms to midPoint. The migration includes data migration, connector mapping, parallel operation testing, and phased cutover.

Question 14

Is there downtime during migration to midPoint?

Accepted Answer

WeKnowIdentity delivers zero-downtime migrations using a parallel operation approach. Your existing IAM platform continues running while midPoint is deployed and configured alongside it. We gradually migrate connectors and workflows, validate everything in parallel, and perform a controlled cutover only when the new system is fully tested and verified.

Question 15

How many identities can midPoint handle?

Accepted Answer

midPoint scales from hundreds to over 1,000,000 identities. WeKnowIdentity has delivered implementations managing from 400 to over 1 million identities across telecom, government, finance, healthcare, education, and media sectors. Performance depends on infrastructure sizing, which we optimize during the architecture phase.

Question 16

Does midPoint support Kubernetes deployment?

Accepted Answer

Yes, midPoint runs natively on Kubernetes. WeKnowIdentity specializes in Kubernetes-native midPoint deployments using Helm charts, GitOps-based configuration management, and automated CI/CD pipelines. This approach ensures reproducible environments, easy scaling, and infrastructure-as-code practices for your IAM platform.

Question 17

What compliance frameworks does midPoint support?

Accepted Answer

midPoint supports compliance with GDPR, NIS2, ISO 27001, SOX, and industry-specific regulatory frameworks. Built-in features include access certification campaigns, segregation of duties (SoD) enforcement, role mining, audit logging, and automated compliance reporting. WeKnowIdentity configures these governance features to meet your specific regulatory requirements.

Question 18

Does WeKnowIdentity provide midPoint training?

Accepted Answer

Yes. WeKnowIdentity offers hands-on midPoint training covering administration, configuration, connector development, and troubleshooting. Training ranges from half-day executive overviews to multi-day intensive workshops, tailored to your teams experience level. We also provide knowledge transfer as part of every implementation project so your team can independently manage midPoint.

We Know Identity

We Know Identity

midPoint Consulting & Implementation

What is midPoint?

Our midPoint Services

Implementation from Scratch

Migration from Legacy IAM

Custom Connector Development

Training & Certification Prep

Why Choose WeKnowIdentity

Ready to Start?

Implementation Depth Resources

For Decision-Makers

Contact

Navigation