Your IAM Expert.
+421 2 3810 1152
info@inalogy.com
INALOGY a.s.
Digital Park II, Einsteinova 3754/23
851 01 Bratislava
Slovakia
Open source identity and access management built on midPoint and Keycloak: one platform for identities, roles and governance, one for authentication and single sign-on. Run on your infrastructure or ours in the EU, with no per-user licence.
Open source identity and access management means two platforms working as one. midPoint, the identity management and governance platform from Evolveum, owns the lifecycle: who exists, which roles they hold, which accounts and entitlements that implies, who approved it and when it expires. Keycloak, the open source access management platform, owns the moment of access: authentication, single sign-on, multi-factor and federation for every application. We have integrated the two for years — midPoint provisions and governs Keycloak, Keycloak enforces what midPoint decides — so you get a complete IAM stack without a commercial suite in the middle.
Both platforms are open source, so the budget goes into implementation and operations instead of per-user licences, and both run wherever you decide: your data centre, your private cloud, Kubernetes, or our managed IAM Factory service on German infrastructure. For organisations under NIS2, DORA or KRITIS that is the difference between a sovereignty requirement met by architecture and one met by a contract clause. See how the commercial suites compare in our identity governance software comparison, and what a project involves on the midPoint implementation page.
A properly implemented IAM solution pays back in four places: fewer manual access changes, faster onboarding and clean offboarding, audit evidence produced by the system instead of by people, and lower risk from orphaned accounts and standing privileges. We implement, migrate from Microsoft Identity Manager and SAP IDM, train your team and — if you prefer — operate the platform for you.
Open source identity and access management covers the use cases below, and many more.
Authentication
Single sign-on, multi-factor and federation through Keycloak, so only verified people and services reach sensitive data and applications.
Onboarding
When someone joins, midPoint creates the accounts and access their role implies — directory, email, SAP and every connected application — on day one, without tickets.
Authorization
Control what users can reach from their role, organisation and attributes; approvals, segregation-of-duties rules and certification keep it that way.
Off-boarding
When someone leaves, access is revoked everywhere automatically and the audit trail shows it happened — the control auditors ask about first.
User Provisioning
Accounts are created, changed and disabled from authoritative HR data across all systems, with a simulation before every change goes live.
User Self-Service
Password resets, profile updates and access requests handled by users themselves, with approvals routed to the accountable owner — less load on IT, faster for everyone.
Password Management
Password policies, credential resets and multi-factor enforced consistently across applications, with Keycloak as the single authentication front door.
Third-Party Access
Partners, contractors and customers get the right access for a defined time, sponsored by someone accountable and reviewed like any other identity.
An IAM stack built from platforms whose source code is open and whose licence costs nothing: midPoint for identity management and governance (lifecycle, roles, requests, certification, audit) and Keycloak for access management (authentication, single sign-on, multi-factor, federation). You pay for implementation, support and operations, not for the right to use the software.
Yes. midPoint and Keycloak run in banks, universities, hospitals and public-sector organisations across Europe, including under NIS2, DORA and KRITIS. The code is auditable, security fixes are public, and both platforms can run entirely on infrastructure you control — which is more than most SaaS suites can offer.
Only if you need both functions. Keycloak alone gives you single sign-on and MFA but no lifecycle, roles or governance; midPoint alone governs identities but does not authenticate users. Most organisations that come to us for IAM need both, and the integration between them is where our experience shows.
There is no licence fee. The cost is the implementation project — sized by the number of connected systems, data quality and governance scope, not by headcount — plus optional vendor subscriptions and operations, in-house or managed. The midPoint implementation pricing page explains the drivers.
Yes; it is the most common reason customers come to us. MIM support ends in January 2029 and SAP IDM mainstream maintenance in December 2027. Our MIM migration and SAP IDM migration services run the parallel operation, data migration and cut-over as defined phases.
Want to see midPoint and Keycloak on your own use cases? Let’s talk. Want to know more about our solutions?
