Evolveum MidPoint 4.8 Release

Identity Governance and Administration (IGA) consolidates User Access Provisioning and Identity & Access Governance, spanning end-to-end identity lifecycle management, access entitlements, workflow and policy controls, role management, access certification, segregation of duties (SoD) risk analysis, reporting, and access intelligence. While identity lifecycle management remains foundational, access governance is increasingly prioritized for better visibility into identity administration and entitlements across IT environments. Governance capabilities range from basic dashboards to advanced AI/ML-driven functions such as pattern recognition for process optimization, role design, automated reviews, and anomaly detection. There is significant room to expand forecasting and prediction within IGA; many organizations have not yet deployed AI/ML features for IGA, and “simulations” are positioned as a practical way to preview outcomes, anticipate consequences, and improve decision-making.

Evolveum, founded in 2011 in Slovakia, provides the open-source midPoint platform, targeting IGA, data protection, and organizational management use cases. midPoint supports LDAPv3 and Active Directory, exposes functions through REST and SCIM APIs, and offers on-premises, Docker, hybrid, and cloud deployment options with Maven-based customization. It emphasizes policy-driven approvals, includes dashboards and a shopping-cart paradigm for role requests, and provides auditing reports, but lacks more advanced identity/access intelligence features today.

midPoint 4.8 expands three areas: simulations (“what-if” analysis) to predict effects of operations like reconciliation without making changes; object and event marks to monitor processing, summarize expected modifications, and constrain actions on problematic or sensitive objects; and AI/ML-powered role mining to cluster existing access data and suggest candidate business roles. Strengths include simulations for forecasting and data integrity, object marking for safer operations and actionable dashboards, and role mining to simplify RBAC. Challenges include missing major compliance framework reporting, limited partner ecosystem outside EMEA, and gaps in advanced analytics (planned). A five-year roadmap highlights role engineering, certification improvements, lightweight reconciliation, advanced lifecycle management, and later risk management, advanced analytics, personas, mobile, and a connector marketplace.

• Identity Governance and Administration merges the traditional User Access Provisioning and Identity & Access Governance markets.
• IGA capabilities include identity lifecycle management, provisioning/deprovisioning, access requests and approvals, access certification, role management, SoD, and audit/compliance.
• Half of poll participants have not deployed AI and ML-related features to support IGA functions.
• Evolveum was founded in 2011 and is an open-source IGA vendor based in Slovakia.
• Evolveum’s midPoint is delivered as a single open-source platform focused on IGA, data protection, and organizational management use cases.
• midPoint supports LDAPv3 repositories and Active Directory access.
• midPoint exposes functionality through REST and SCIM APIs and also offers command-line interfaces.
• midPoint can be deployed on-premises, via Docker, in hybrid setups, and in cloud environments, with customization via Apache Maven.
• midPoint 4.8 introduces expanded capabilities in simulations, object/event marks, and AI/ML-powered role mining.
• midPoint has no license fees, excluding maintenance costs.

• “The latest trend is to integrate IGA tools with AI and Machine learning (ML) capabilities.”
• “The opportunity to look into the future, offering a preview of what will be executed.”
• “This function can be termed as ‘Simulations’.”
• “This feature allows admins to see the consequences of certain actions without the risk of compromising the current system.”
• “Simulations serve as a safeguard against incorrect configurations.”
• “During these simulations, no actual changes are executed, however, they are solely stored for later analysis.”
• “Object marks allow for defining permissible actions on objects.”
• “Moreover, simulations together with object marking can significantly speed up the automation of ‘Joiner, Mover, Leaver’ (JML) processes.”
• “The incorporation of AI and machine learning-powered functionalities within midPoint has facilitated the role mining process.”
• “midPoint uses this technology by enabling the detection of roles through data clustering, pattern recognition, and similarity methods,”