GOVERNATLAS / PRODUCT DOSSIER

midPoint

Evolveum documents midPoint synchronization and reconciliation across identity repositories, provisioning, role-based access and approval processes. Evolveum documents connector-driven target changes, policy processing and audit reporting; it distinguishes its identity-management role from authentication services.

Explore the product ↗Add to comparison ↗

01 / CONTEXT & SCOPE

Understand the proposition.
Define the boundary.

Where it fits

Evaluate the mapping and reconciliation model, not just whether a sample account appears.

The decision to make

Evaluate the mapping and reconciliation model, not just whether a sample account appears. A source attribute can drive role assignment, which in turn changes several target accounts. The engineering work is to make precedence, ownership and exceptions understandable when those sources disagree. Identify who maintains connector configurations and validates policy changes after an upgrade.

What this record does not establish

The introduction establishes documentary architecture and capabilities, not a production support commitment or tested connector coverage. Do not substitute introductory speed examples for implementation estimates. Confirm the selected release, license and support arrangement separately.

1 current source · 2 published assertions
Source coverage is a research boundary, not a quality score.

02 / YOUR EVALUATION

Turn interest into a useful trial.

Open the evaluation playbook ↗

A test worth running

Feed a synthetic HR change into a small test deployment. Include a duplicate employee identifier, a mover and an exception that must survive reconciliation. Compare calculated account state with target state, then repair a deliberately failed connector operation. Export the mapping configuration and audit trail so another engineer can explain why each entitlement was added or removed.

GovernAtlas editorial proposal. We have not performed this test.

Evidence to bring back

Versioned mappings and source-precedence rules, including duplicate and exception handling.
A reconciliation trace linking source changes, calculated assignments and native target results.

THE OPERATING DETAIL

Follow the decision into the enforcing system.

GovernAtlas analysis: practical review considerations, not findings from a product test.

Set the operating boundary

A source attribute can drive role assignment, which in turn changes several target accounts. The engineering work is to make precedence, ownership and exceptions understandable when those sources disagree. Identify who maintains connector configurations and validates policy changes after an upgrade.

A proposed buyer demonstration

What the evidence does not establish

03 / DOCUMENTED EVIDENCE

Read the claim. Inspect the basis.

Each statement retains its classification and preserved source. A vendor assertion is not an independent test result.

first party asserted

Evolveum documents connector-driven target changes, policy processing and audit reporting; it distinguishes its identity-management role from authentication services.

Source, dates & preserved provenance

midPoint — current primary scope ↗

Authority: first party
Observed 2026-10-18 · Reviewed 2026-10-18 · current until 2026-11-17

Artifact SHA-256: 9174ac06a327a5b1c5c44532968497883890caeb54ee310dc4c35846a07256d5

The hash identifies the preserved capture. The live source may have changed.

first party asserted

Evolveum documents midPoint synchronization and reconciliation across identity repositories, provisioning, role-based access and approval processes.

Source, dates & preserved provenance

midPoint — current primary scope ↗

Authority: first party
Observed 2026-10-18 · Reviewed 2026-10-18 · current until 2026-11-17

Artifact SHA-256: 9174ac06a327a5b1c5c44532968497883890caeb54ee310dc4c35846a07256d5

The hash identifies the preserved capture. The live source may have changed.

Source register

midPoint — current primary scope ↗first party · captured 2026-10-18

Brand asset provenance

Organization identity asset from its official website; inclusion does not imply endorsement.

Official website ↗ · Original asset ↗

04 / BEFORE YOU COMMIT

Better questions.
A clearer decision.

Resolve these with the provider and your own evaluation team.

Can you demonstrate and export: Versioned mappings and source-precedence rules, including duplicate and exception handling.

Can you demonstrate and export: A reconciliation trace linking source changes, calculated assignments and native target results.

Regulatory applicability requires a separate, current determination. Inclusion is not certification.

COMPLIANCE / CLAIMS, SCOPE & GAPS

Start with the requirement.
Inspect the support.

Prepare your vendor review ↗

These labels describe this dossier’s current evidence coverage. A published mention may be a framework mapping, a qualified assertion or a limitation; it is not a compliance finding.