Evolveum midPoint Review

Easily Handle All Of Aspects Of User Lifecycle Management Through Identity Governance

Evolveum midPoint is an outstanding identity governance and administration tool because it covers all the processes and tasks all throughout the user lifecycle. Thus, it allows users to define what identity information need to be used, determine what access rights and privileges are granted to those persons who have such information, control how identify information is being exchanged and shared between internal and external systems, and check whether the access rights and privileges they are setting up and assigning are in line with their policies. Thus, it allows them to not only speed up user lifecycle management but also completely audit all processes and tasks related to it. Because of this, they can eliminate risk and any possible impact it may cause to the performance of their organization or business, and at the same, attain a high level of security.

Audit All Access-Related Interactions And Activities

The enterprise identity governance and administration tool has a feedback system that enables users to be on top of all actions and activities being performed within Evolveum midPoint. Through this system, the platform can generate audit records of all actions, activities, and interactions; and even allows users to go back in any period of time as they access and review such audit records. Here, they can review if the individuals were able to access the right systems, which individuals sent the access requests, why the access requests were granted or denied, and who approved or denied those access requests.

Model Your Own Organizational Structures Within The Platform

Evolveum midPoint is a very flexible tool because it is designed to support any organizational structure. In fact, it permits users to arrange their organizational structures within its system; and they can set up various types of organizational structures like organizational trees. To set up their organizational structure, the platform allows them to use objects. Objects are comprised of all the elements that will form their organizational structure such as teams, division units, departments, domains, projects, workgroups, and roles.

Assignments And Inducements

As users construct their organizational structure within the platform, they can assign roles or tasks both directly and indirectly. Assignments that are assigned indirectly are called inducements. Users must understand the difference between direct assignments and indirect assignments (inducements) so that they can determine which objects in the organizational structure shadow accounts are applied to.

Shadow accounts are sub-accounts that they need to use in order for them to be granted access to their systems, applications, and other resources. Inducements can be specified or included in objects where users are assigned. However, they do not apply to those objects. Instead, they are applied to the users where such objects are assigned. Thus, when users access a system through an inducement, the shadow account that he or she is going to use and need be authenticated is the one assigned to him or her, and not the shadow account associated with the object where the inducement is specified.

Create Password Policies And Produce Strong And Unique Passwords

Credential management is another feature offered by Evolveum midPoint.With this feature, users can formulate password policies for creating passwords and generate strong and unique passwords. Whatever passwords they created can be assigned to specific persons and resources. Users have the freedom to specify how their passwords should be constructed. They can define the type of characters that will be included in the password, how many times those characters will be repeated, and how many unique characters will be used in the password. They can create a password policy that allows the combination of uppercase letters, lowercase letters, numbers, and specials characters. If they don’t want some characters to be included in the password, they can also create a password policy for such purpose.

Approval Workflows

Evolveum midPoint permits users to build workflows that make it easy for authorized persons to supervise and approve key processes and tasks related to identity access and management such as granting or denying access to resources, assigning roles to individuals, modifying or updating access rights and privileges, password policies, and passwords; and actions that involve deactivation or deletion. They can set up workflows that may require multiple approvers and the participation of various organization units or enterprise-wide roles.

Centralized Entitlement Management

Summing it up, the identity governance and administration solution enables users to perform entitlement management in a centralized manner. Here, they can grant and control access to systems, applications, and networks based on the specific roles and resources which they can assign. Creating and updating access policies using this feature is also a breeze. When they need to create or modify an access policy or rule for a set of applications, they can automatically apply the new or updated policy or rule to those applications. The entitle management feature of the platform allows users to define what specific actions or activities their employees and stakeholders can do after they are able to access the application or network.