midPoint Implementation Partner
One of seven midPoint Gold Partners worldwide.
Implementation, migration, training and operations for open source identity governance — made in Europe.
03
midPoint Gold Partner.
Implementation, migration, training, operations
Inalogy is a midPoint implementation partner based in Bratislava, Slovakia, and one of seven companies worldwide holding Evolveum’s Gold partner status. Our team of more than twenty IAM specialists designs, builds, migrates and operates midPoint — the open source identity governance and administration platform recognised by Gartner and licensed under Apache 2.0 and the EUPL.
We work with midPoint because it is the only IGA platform whose complete governance scope — lifecycle, roles, certification, segregation of duties, simulations — is open source, and because it runs where our customers need it: on-premises, in a private cloud, or as a managed service on EU infrastructure. Inalogy is ISO 9001, ISO 20000 and ISO 27001 certified and carries the Cybersecurity Made in Europe label.
A midPoint implementation with us starts with the data model — authoritative sources, correlation, the organisational structures that will drive automation — because that is where identity programmes succeed or fail. Connectors are tested in the first weeks, not the last. Every mapping, role and policy is simulated against production data before it goes live, and governance (certification, SoD, self-service) is switched on once the account data is clean.
Beyond implementation we migrate legacy platforms (Microsoft Identity Manager, SAP IDM, DirX, home-grown systems), deliver midPoint training for administrators and architects, and operate midPoint for customers who would rather not — through IAM Factory, our managed IGA service hosted in Germany. Two of our engineers presented production patterns at the 2026 midPoint Community Meetup in Prague.
midPoint services we deliver
Implementation
Architecture and data model, HR-driven lifecycle, role model and policies, connectors, workflows, certification and reporting — delivered in phases with simulations before every go-live.
Migration from legacy IAM
Microsoft Identity Manager (support ends 9 January 2029), SAP IDM (mainstream maintenance ends 31 December 2027), DirX and home-grown systems, replaced in parallel runs without a big-bang cut-over.
midPoint training
Administrator and architect courses built on real project scenarios, on-site or remote, in English, Slovak or Czech — for teams taking over operations or preparing for Evolveum certification.
Connectors and extensions
ConnId connectors for bespoke systems, our open source midPoint SSH connector, Keycloak integration, and AI-assisted connector development that turns weeks into days.
Operations and managed service
Upgrades between major versions without weekend outages, monitoring, second-line support — or midPoint fully operated by us in IAM Factory on German infrastructure.
Governance for humans and AI agents
Access certification, segregation of duties, role mining — and the same lifecycle and RBAC applied to AI agents and other non-human identities.
Where we have delivered midPoint
Telecom — legacy IDM replacement
DirX replaced with midPoint at Orange Slovakia: HR-driven lifecycle across a large, fast-changing workforce. Case study.
Higher education
Identity management for the University of Prešov, Comenius University Bratislava and the University of Namur — students, staff and external identities. Case study.
Banking and regulated sectors
Governance under NIS2, DORA and ISO 27001: certification campaigns, SoD enforcement, audit evidence — on infrastructure the customer controls.
midPoint in Kubernetes
Containerised midPoint deployments for customers running their own platform engineering — and our own IAM Factory service.
04
How a midPoint implementation runs with Inalogy
| Phase | Typical duration | What happens | Output |
|---|---|---|---|
| 1 — Discovery and design | 3–6 weeks | Authoritative sources, correlation and data model; target-system inventory; role approach; deployment model (on-premises, private cloud, IAM Factory) | Solution design and delivery plan |
| 2 — Foundation | 1–3 months | Environment, HR and directory sources connected read-only, core connectors validated, reconciliation of the identity store | Clean, reconciled identities |
| 3 — Build and simulate | 2–6 months | Mappings, roles, policies, workflows, self-service; every change simulated against production data; UAT per target system | Provisioning validated before go-live |
| 4 — Go-live and governance | 1–2 months | Phased provisioning cut-over; certification campaigns and SoD switched on; reporting; administrator training and hand-over | midPoint in operation, team trained |
| 5 — Operate and evolve | ongoing | Major-version upgrades, new systems and use cases, managed operations if wanted | Platform that grows with you |
We use AI-assisted delivery for connector and mapping work — prototype on day one, engineer review on day two, customer UAT in week one — which is why timelines that used to be quoted in years are now quoted in months. For the technology background, see our comparison of open source IGA platforms and our midPoint training overview.
05
Frequently asked questions about midPoint implementation
What does a midPoint implementation partner do?
Designs the identity data model and role approach, implements connectors, mappings, policies and workflows, migrates data from the legacy platform, runs simulations and go-live, trains the customer’s team and — if wanted — operates the platform. Evolveum develops midPoint and provides subscriptions; partners deliver projects.
What does the Gold partner status mean?
Evolveum’s highest partner tier, held by seven companies worldwide. It reflects certified engineers, delivered projects and contributions to the platform and community.
How long does a midPoint implementation take?
From a few months for a focused scope (HR to directory and a handful of targets) to 8–14 months for large multi-entity organisations with 20 or more systems and full governance. Migrations from MIM or SAP IDM follow the same pattern with a parallel run.
What does it cost?
midPoint has no licence fee. Costs are implementation services, an optional Evolveum subscription for support and maintenance releases, and operations — in-house, with us, or managed in IAM Factory. Unlike per-user commercial IGA, cost does not grow with headcount.
Can you also run midPoint for us?
Yes. IAM Factory is our managed midPoint service on German infrastructure, with operations, upgrades and monitoring included, for customers who want European sovereignty without running the platform themselves.
Planning a midPoint implementation or replacing a legacy platform? Tell us about your sources, systems and constraints — let’s talk. Want to know more about our services?
