Chapters

• The end-of-life of SAP IDM and MIM
• When the obvious choice isn’t always the right one
• The CISO’s strategic migration playbook
• Finding the right replacement for SAP IDM and MIM
• The strategic path forward that shapes the next decade

The end-of-life of SAP IDM and MIM

SAP Identity Management 8.0 mainstream maintenance ends on December 31, 2027, with extended maintenance available until 2030. This date might seem far off, but anyone who’s been through a major identity system migration knows how quickly time flies when you’re dealing with complex integrations, data migrations, and user training. SAP has confirmed it is not developing an on-premises alternative and is heavily encouraging its customers to get rid of custom scripts and embrace a more standardized approach within the cloud.

Microsoft Identity Manager support was extended to January 9, 2029. However, Microsoft stopped actively developing MIM in 2021, focusing instead on Entra ID (formerly Azure AD).  While Service Pack 3 (SP3) was released in May 2026 to support modern operating systems and SQL servers, it only serves as a temporary bridge. On top of that, SharePoint Server 2016 and 2019 reached end of support in July 2026, and any organization relying on them to host their MIM Portal must upgrade to SharePoint Server Subscription Edition (SPSE) or eliminate the portal entirely just to stay compliant. The message is clear: their priority is no longer on-premises identity solutions.

For many organizations, this marks the end of an era – and the beginning of a significant challenge. For those navigating strict data sovereignty requirements or committed to maintaining critical on-prem capabilities, the road ahead may be even more complex. However, there is light at the end of the tunnel. After years of stagnant feature development, most current SAP IDM and MIM environments are outdated, lacking modern identity governance capabilities. Now is the perfect time to rethink your identity infrastructure and modernize your identity security posture.

In the following sections, we will explore practical strategies for legacy identity system migration and outline key options available to ensure a smooth, secure, and future-proof transition.

When the obvious choice isn’t always the right one

When legacy systems reach end-of-life, the natural path often leads to vendor-recommended successors. SAP and Microsoft have developed clear migration guidance toward their cloud-based alternatives: SAP Cloud Identity Services and SAP Cloud Identity Access Governance for identity and access management into SAP products and Microsoft Entra ID.

These solutions offer compelling advantages – modern cloud architecture, reduced infrastructure overhead, and tight integration within existing vendor ecosystems. For organizations heavily invested in Microsoft or SAP technologies, this path provides obvious benefits.

However, neither Entra ID nor SAP Cloud Identity Services represents a direct replacement for their on-premise predecessors. They differ in architecture, features, and how they operate, which means they might not fit every organization’s needs.

Before jumping on the bandwagon, ask yourself:

• Is Microsoft or SAP at the core of your tech stack, and are you planning to stay within a single-vendor architecture? Or are you operating in a more complex, multi-vendor ecosystem?
• Will your architecture remain on-premise, migrate to the cloud, or maintain hybrid operations?
• How complex are your identity governance and administration needs beyond basic user lifecycle management?
• What are your future scalability, security, and compliance needs?

Hybrid achitecture adds complexity

Most large organizations run hybrid environments with a mix of on-premise and cloud systems. Within these environments, managing identity and access consistently can be challenging. Microsoft talks about Entra ID as a hybrid solution, and in many ways it is. But the reality of making it work smoothly across all your systems can be more challenging than initial assessments suggest.

Managing identities in a hybrid IT architecture is not always straightforward. Organizations commonly run into:

• Identity synchronization challenges across forests and domains
• Custom attributes that don’t cleanly map to cloud directories that break in modern policy frameworks
• Firewalls and proxies that impede cloud-to-ground communication in apps not designed for modern protocols

Hybrid identity architecture can add complexity. For many organizations, it offers the necessary balance to maintain compliance and customization without compromising long-term transition potential. The good news is that with identity platforms purpose-built to handle hybrid environments, these complexities can be effectively managed.

Cloud-first isn’t for everyone

Amid the push toward cloud migrations, it’s important not to overlook that many organizations choose to keep their operations on-premises. In such cases, adopting a cloud-native identity platform like Entra ID may not make much sense.

While some vendors are scaling back support for on-prem identity solutions, that doesn’t mean on-prem architecture is obsolete. In fact, many enterprises, including large global ones, continue to rely on it, often due to cost, strict regulatory compliance, and the need for full control over infrastructure and operations. If your organization falls into this category, that’s a valid and strategic choice.

That doesn’t mean your options are limited, though – there are still modern platforms that not only work in the cloud, but also fully support on-prem deployments and are committed to continuing that support.

Integration and customization challenges

This is where many organizations get surprised. If you’ve spent years building custom workflows, approval processes, and business rules in SAP IDM or MIM, you might find that Entra ID doesn’t give you the same level of flexibility.

Microsoft has built a solid platform, but it’s designed to work optimally within a Microsoft environment. If your business processes don’t align with that approach, you’ll need to either change your processes or find workarounds that add complexity and cost.

The true cost of migration

Per-user pricing models appear straightforward during initial evaluations, especially for smaller organizations. But enterprise-scale implementations frequently involve premium features, additional connectors for non-vendor systems, custom development requirements, licensing fees, and subscription costs that significantly impact long-term budgets.

The CISO’s strategic migration playbook

Successfully migrating from legacy platforms requires a comprehensive approach that balances strategic planning with practical, risk-aware execution.

Organizations should begin this process well in advance of sunset dates, as identity system migrations typically require 12-36 months for full implementation in enterprise environments. Simply defining requirements and selecting the right solutions can take several months. Those who delay risk security vulnerabilities, operational disruptions, and compliance issues. That said, with the right tools and approach, you can have a steady stream of initial results from the beginning of the migration process.

Here’s a high-level roadmap to help you navigate this transition successfully:

1. Assess your current identity landscape

Start with a thorough inventory of your existing identity infrastructure. Document not just your systems and integrations, but the actual business processes they support. Often, organizations discover that their identity management has evolved far beyond its original design, with workarounds and customizations that aren’t immediately obvious.

At this stage:

• Review your systems, target directories, and applications, making sure to compare data for inconsistencies.
• Map how your identity systems connect with other applications.
• Understand existing identity lifecycle triggers, provisioning flows, and access policies.
• Audit your data and workflows and look for orphaned and over-permissioned accounts and toxic permission combinations.
• Take an inventory of non-human identities, such as service accounts, API credentials, and AI agents. In modern stacks, NHIs outnumber human accounts by a wide margin.

Also, map your compliance requirements early in the process. Different solutions handle regulatory requirements differently, and understanding these constraints upfront prevents costly discoveries later in the migration.

💡 Best Practice: Take this opportunity to “clean house”. Review your current licenses, identify which tools and capabilities are truly necessary, and pinpoint under-utilized applications. You might find significant savings by removing unused licenses and consolidating your tools.

2. Define your requirements

Engage stakeholders across IT, security, and business units to understand their actual needs and requirements. Focus on business outcomes rather than technical feature translations. This approach often reveals opportunities to streamline processes during the migration.

Consider your organization’s five to ten-year trajectory:

• How complex do you anticipate your identity needs to be?
• How will your identity governance requirements grow?
• Are there any emerging regulations or compliance requirements that will have an impact on your identity processes?
• How will your tech stack grow and what integration capabilities will you need?
• Are you planning to expand internationally?
• What about future mergers or acquisitions?

These factors should guide you in selecting the right solution to support your needs for years to come.

💡 Best Practice: Keep the initial scope focused and achievable. Successful teams often start with a core domain, like workforce identity lifecycle management, and build outward in manageable iterations. This allows for early value delivery and room for lessons learned to inform future phases.

3. Evaluate solutions through a security lens

Evaluation processes should extend well beyond feature comparisons and vendor demos. This includes assessing integration capabilities with existing systems, evaluating performance under realistic load conditions, and understanding true customization flexibility, while prioritizing security controls.

• Authentication and credential security: Assess credential storage encryption, supported authentication methods, passwordless controls and multi-factor authentication enforcement capabilities. Examine password policies and session management.
• Audit and compliance capabilities: Verify detailed logging of access decisions, configuration changes, and administrative actions. Confirm log retention periods and export capabilities. Ensure compliance reporting supports your regulatory requirements.
• Non-Human Identity (NHI) and AI governance: Verify support for managing the full lifecycle of not only human identities but machine and AI identities too.
• Vulnerability management: Evaluate security patch frequency, the vendor security track record, and testing procedures, including penetration testing and code reviews. Request vulnerability disclosure timelines and remediation processes.
• Data protection and privacy: Determine data residency locations, processing controls, and personally identifiable information handling procedures. Verify data export, deletion capabilities, and privacy regulation compliance mechanisms.
• Technical roadmap and sustainability: Understand the vendor’s product development plans and strategic vision. Assess whether the solution is actively maintained and evolving to keep pace with emerging security threats, regulatory changes, and technological advancements.

💡 Best Practice: Favor platforms that allow non-disruptive analysis and prototyping. This ensures you can validate the technical fit, policy alignment, and risk exposure before you commit to full deployment.

4. Build a risk-aware migration plan

Avoid “big bang” migrations. Successful migrations follow phased approaches that balance early insight with controlled execution. While traditional wisdom often suggests starting with non-critical systems, in identity management, it’s often more effective to connect to foundational, business-critical systems early in a non-invasive, simulation-driven way. This approach provides crucial visibility into your most complex and foundational identity flows without introducing immediate risk. Each migration phase should allow time for:

• Integration challenges
• Refining processes
• Validating assumptions before migrating business-critical systems

Pilot phases should focus on complex integration scenarios rather than simple ones, revealing potential issues early in the process.

Don’t forget about resource planning either – these migrations demand significant technical resources and expertise. Resource allocation should account for senior technical staff being significantly engaged with migration activities for extended periods. Assess internal capabilities honestly and plan for external support where needed, including technical implementation support and change management.

Your migration plan should include comprehensive rollback procedures for each phase, strategies for maintaining security during parallel system operations, and clear incident response procedures for migration-related security events.

💡 Best Practice: Connect to core systems like AD early in the process using non-disruptive simulations. This gives you visibility into your identity baseline, reveals gaps or legacy issues, and sets the stage for safer phased implementation, allowing you to “see before you act.”

5. Invest in change management and user adoption

Technical implementation represents only part of your challenge. Successful migrations require comprehensive change management strategies beginning with key stakeholder involvement from IT, security, and business units during solution selection to ensure buy-in and realistic expectation setting.

Training programs should reflect actual user workflows rather than theoretical processes. Organizations should plan for different user groups with varying technical skills and interaction patterns. The communication roll out should address concerns proactively, provide clear feedback and support channels, and maintain transparency about timelines and impact expectations.

💡 Best Practice: Pair each technical delivery phase with targeted stakeholder communication, user training material development, and clear success measurement. Early small wins, achieved through iterative and low-risk deployments, help establish credibility and build momentum for broader adoption.

Finding the right replacement for SAP IDM and MIM

The identity and access management (IAM) market has matured considerably in recent years with numerous established and emerging platforms worth serious consideration. While certain recommended routes offer integration advantages, they’re not the only options:

• Full-featured identity governance platforms: Vendors focused specifically on identity governance and administration often provide deeper governance capabilities and more flexible customization options than general identity management and lightweight IGA solutions. While light IGAs can be handy, often offering out-of-the-box functionality – they frequently lack the robust features required for comprehensive, long-term governance and scalability.
• Hybrid IGA platforms: Designed to support on-prem, hybrid, and cloud deployment needs. For organizations working in a hybrid operational model or those planning a gradual migration to the cloud, these platforms can be an ideal solution.
• Open source software: Modern open-source identity platforms have gained significant enterprise adoption. These solutions now offer enterprise-grade features, professional support options, and active communities that contribute to their ongoing improvement, such as testing, answering community questions, and even developing custom connectors, providing maximum flexibility and customization potential.

Evaluate platforms based on your specific architecture and business needs – consider factors beyond brand recognition. It is worth examining community threads to understand real-world scenarios and engaging with companies with similar challenges. Also, ask for proof-of-concepts where possible.

When it comes to cost, think about the total cost of ownership, including licensing fees, implementation costs, ongoing maintenance, training requirements, and potential needs for external expertise.

Don’t wait until support runs out. Discover how midPoint’s open source IGA platform aligns with your unique needs and environment.

Explore midPoint.

The strategic path forward that shapes the next decade

Thousands of organizations affected by the end-of-life of the SAP IDM and MIM now face pivotal decisions about their identity management future. While vendor-recommended migration paths offer predictable routes, they may not represent optimal solutions for every environment. The key lies in approaching these decisions strategically rather than reactively.

Take time to understand options fully – evaluate solutions based on specific requirements rather than general market positioning, and consider long-term implications. Today’s identity management market offers mature alternatives across different deployment models, architectural approaches, and business models.

Starting evaluation processes early and considering the full spectrum of available solutions will ensure the chosen platforms support long-term organizational objectives. Remember, the decisions made today will impact your identity security operations for the next decade or two.

About Evolveum:
Evolveum is the organization behind midPoint, the leading open source IGA platform recognized as a complete IGA by both Gartner and KuppingerCole. MidPoint bridges the gap between IT and business, making it an ideal choice for organizations seeking digital transformation to enhance security and efficiency.

The post SAP IDM & MIM End-of-Life: How to Plan Your Identity Migration appeared first on Evolveum | Open Source Identity Management & Governance.

Over the course of the midPilot project, we have been exploring how artificial intelligence can assist organizations in simplifying and accelerating system integrations. The goal has always been to reduce the effort required for connector development and application onboarding thanks to artificial intelligence while keeping humans in control of the process. With M4, these ideas are becoming available for hands-on testing and feedback from the midPoint community.

We are proud to announce that the EU-funded portion of the midPilot project has successfully concluded. The research and development conducted during this phase have been instrumental in shaping the future of midPoint. You can read more details of our progress and outcomes in our final report blog post. Building on the success of this phase, the project itself continues at full speed. We have now moved into the productization phase, where our focus shifts from research and experimentation toward refining these new features, ensuring stability, improving performance, and polishing the user experience for the final release.

Because M4 serves as our official preview version, we highly encourage you to download it and experience these latest capabilities firsthand, before the main release. To help you get started, we have adapted our recent MidPoint Community Meetup (MCM) workshops into easy-to-follow tutorials:

• Trying Out the MidPilot Connector Generator
• Try Me (Workshop): AI Assisted Integration of First Systems with MidPoint.

Development continues at a rapid pace as we work toward a production-ready version. You can expect a steady stream of improvements and bug fixes in the coming weeks – in fact, Milestone 5 (M5) is already scheduled for release at the end of July.

Thank you for your ongoing support. Your feedback is more valuable than ever, and we look forward to hearing your thoughts!

---

The post MidPilot Project Try the New AI-Assisted Integrations of MidPoint 4.11-M4 appeared first on Evolveum | Open Source Identity Management & Governance.

The midPilot project was created to change that. Funded by the European Union’s Recovery and Resilience Plan, midPilot explores how artificial intelligence can assist throughout the application onboarding process while ensuring that every important decision remains under human control. With the successful completion of the project’s third milestone in May 2026, we have delivered a functional foundation for AI-assisted application onboarding in midPoint. Rather than building a standalone AI experiment, we integrated intelligent assistant midPilot directly into the midPoint ecosystem through new microservices, connector generation workflows, workflow orchestration, and an integration catalog designed for community collaboration.

Why AI in identity governance and administration requires human oversight

Artificial intelligence can dramatically reduce the effort required to onboard new applications, but identity IGA isn’t a domain where AI can operate without supervision. An incorrect mapping, permission assignment, or provisioning rule doesn’t simply produce an inconvenience – it can create serious security risks, compliance issues, or unintended access to sensitive resources. That is why one design principle guided the entire midPilot project: humans remain in control.

Instead of attempting fully autonomous onboarding, midPilot uses AI to analyze documentation, suggest schemas, generate connector artifacts, draft mappings, and recommend correlations. Expert administrators review every suggestion before it becomes part of a production configuration. This human-in-the-loop model combines AI’s speed with the expertise and judgment of a real human, delivering faster onboarding without sacrificing transparency or trust.

Staying true to Evolveum’s open source DNA, all project deliverables have been implemented in public GitHub repositories. This includes upstream contributions to the main midPoint repository, the integration catalog, the SCIM/REST connector framework, and the dedicated AI microservices. The broader community can immediately access, verify, and benefit from these outcomes.

What we delivered

The true measure of midPilot is the practical value it delivers to identity engineers. By reducing the heavy lifting of documentation analysis, schema preparation, and correlator drafting, we are drastically cutting down manual onboarding effort. To achieve this, we delivered four major technical outcomes.

• A Smart Integration Microservice: Handles schema matching, data mapping, and correlation support while suggesting optimal object and focus types.
• A Connector Generation Microservice: Features session-based discovery, documentation scraping, digestion, and artifact generation.
• Native midPoint Workflow Integration: We built substantial orchestration, validation, persistence, and UI integration directly into midPoint to support smart implementations and connector development.
• The Integration Catalog: A dedicated infrastructure for the publication, discovery, and reuse of integration artifacts. This shifts the ecosystem away from isolated, one-off connector builds toward a collaborative model where configurations can be easily shared and versioned.

How we validated the solution

Building AI features is only valuable if they perform reliably in real onboarding scenarios. Rather than evaluating individual AI models in isolation, we evaluated the complete integration pipeline. Identity engineers ran rigorous end-to-end test scenarios to validate the entire workflow, from providing initial documentation to executing a fully functional connector.

Testing was conducted across diverse, realistic environments, including customer-like proofs-of-concept (PoCs), workshop settings, and Evolveum’s own infrastructure. Using dedicated Docker configurations and SaaS sandboxes, we evaluated the connector generator against both plain REST and SCIM APIs. Tested systems included OpenProject, Codeberg-Forgejo, Nextcloud, Zendesk, and Atlassian, covering full CRUD capabilities for users and groups.

Crucially, these tests proved the effectiveness of our “human-in-the-loop” philosophy. The evaluation mirrored a real-world workflow: engineers provided structured input, reviewed the AI-generated connector artifacts, refined them directly within the midPoint UI, and tested the results. This confirmed that the wizard-based workflow genuinely simplifies and accelerates the authoring process for identity experts.

Looking ahead

With the strong functional baseline established by midPilot, we are shifting our focus from architecture building to consolidation, hardening, and perfecting the user experience. Here is a glimpse into the future of midPoint.

Shifting to a Top-Down, Business-First Approach

Historically, identity integration has been a bottom-up process: administrators configure connectors, map schemas, and handle technical details before ever addressing the business context. We are flipping that script. Engineers will begin by selecting a prepared application from a card-based UI, choosing an integration method, and defining business details (like the application owner and manager) before diving into the technical weeds. If an app isn’t available locally, users will be able to seamlessly recover by browsing the integration catalog.

New Application Dashboards and Setup Assistant

AI is only half the solution; if a user gets lost in the configuration UI, AI suggestions lose their value. To solve this, we are moving away from dense configuration forms and introducing Application and Resource Dashboards. These object-level dashboards will summarize configuration states, integration readiness, and operational signals in one place.

Complementing this is the new Setup Assistant. Adopting a structured two-column layout, the assistant acts as a persistent guide throughout the onboarding journey. It actively bridges the gap between initial app creation and detailed resource configuration, ensuring engineers never have to guess what requires their attention next. (Of course, power users can still configure objects manually whenever they prefer!)

Bringing the Integration Catalog Natively into midPoint

Currently, leveraging the integration catalog involves browsing externally, downloading files, and importing them into midPoint. Soon, we will connect midPoint directly to the catalog. Engineers will be able to browse, download, and deploy community-built integrations natively from the midPoint UI. Furthermore, partners and users will be able to easily upload their own AI-assisted connectors back to the community directly from their environments.

Security by Design: MidPoint Expression Language (MEL)

To guarantee that AI-generated configuration scripts are entirely safe for production environments, we are natively integrating our own strictly controlled MidPoint Expression Language (MEL) into midPilot. This ensures that all AI-generated mapping expressions are secure by design, fundamentally eliminating the risk of unwanted or malicious code injection. You can read more about MEL here.

Updating Our Training and Methodologies

Finally, we want to share everything we’ve learned. We will be updating our midPoint deployment methodologies, certification processes, and training curriculums to include AI-assisted configuration. This will give our users a safe, hands-on tutorial to master AI-assisted connector development and deployment.

Conclusion

The completion of the third midPilot milestone marks an important step toward bringing practical, AI-assisted application onboarding to midPoint. Rather than replacing identity engineers, midPilot is designed to reduce repetitive work by helping analyze documentation, generate connector artifacts, and guide configuration while leaving every critical decision in human hands. As we continue refining the user experience and expanding these capabilities, our goal remains the same: to make onboarding new applications faster, more consistent, and easier to manage without compromising security, transparency, or trust.

Want to explore the project’s architecture, evaluation methodology, and technical findings in more detail? Read the full midPilot report here.

---

The post MidPilot Project: Milestone 3 – Delivering AI-Assisted Application Onboarding for MidPoint appeared first on Evolveum | Open Source Identity Management & Governance.

What is TNC?

The Networking Conference (TNC) by GÉANT is the largest and most prestigious annual event for the global research and education community. The conference serves as a vital meeting point for over 900 experts, researchers, academics, and technology providers from more than 70 countries. While many technology events focus on products or vendors, TNC focuses on the essential infrastructure and trust frameworks that enable researchers, students, and institutions to collaborate across organizational and national boundaries. It starts with the activities of NRENs (National Research and Education Networks) building infrastructure and services within their respective countries, but it doesn’t end there. TNC stretches these activities to the pan-European level, truly enabling research collaboration without boundaries.

Trust and Identity at the heart of TNC26

This is especially interesting in the area of Trust and Identity, where it generates a new set of technical challenges that test the limits of current standards and push for new innovations.
When designing an identity solution for a single institution, you usually have a reliable source of truth, like an HR system, possibly combined with a student information system. Now, imagine building something similar for large-scale, cross-border collaboration. You have to figure out how to source identities, verify them, build trust, and much more. This is exactly what was at the center of focus this year.

3 key emerging trends from TNC26

1. Modernizing the OpenID Connect (OIDC) Federation

One of the most prominent topics that grabbed my attention was the OIDC federation, the technological successor to our current academic federations built on SAML 2.0. The goal here is to modernize the tech stack, allow for the use of new OIDC features, and solve several pain points inherent in current SAML-based systems. While this was discussed in the context of academic federations, which currently pilot these technologies on a “small” scale with several million users (yes, that’s how large the academic federation is!) – the results will surely be useful far beyond academia.

2. Getting Closer to Digital Identity Wallets

Digital identity wallets are a great example of innovation that can solve complex problems and simplify life for users. Heavily supported by the European Union, the vision is a unified identity layer compatible across the EU and eventually the world. By moving away from physical documents and fragmented logins, these wallets aim to bring not only convenience but increased security and privacy. Although standards are still being developed, experts are already running proof-of-concept experiments and using that experience to refine the technology. It’s inspiring to see how the lessons learned from building trust at the scale of academic federations are being applied to such a critical global project.

3. Advancing Identity Governance and Administration (IGA)

Identity Governance and Administration (IGA) was the topic that I brought to TNC26. In the world of research collaboration, the focus is naturally on enabling connection: gathering identities, authentication, and building trust. These are difficult problems to solve.

Nevertheless, I believe it is time to take the next step and put more focus on Identity Governance and Administration (IGA) within research collaborations. The reality of our current threat landscape makes this shift non-negotiable. According to the UK Government’s Cyber Security Breaches Survey 2025/26, 98% of higher education institutions identified at least one cyber breach or attack during the previous 12 months.

While simple authentication acts as the front door, it does little to stop a bad actor once they bypass it. Phishing remains the primary vector, leading directly to compromised user accounts that attackers use to move laterally through massive academic networks. When an account is taken over, it doesn’t just disrupt a localized IT system; it compromises intellectual property and sensitive research data.

Beyond the immediate cyber threat, research and education institutions are facing growing regulatory and compliance needs. IGA can address these challenges and make life significantly easier. Specifically, IGA helps enforce the principle of least privilege, automate complex identity lifecycles, ensure access is removed when a researcher leaves a project, and provide the auditability increasingly required by regulators.

Looking Forward

The research and education community has already contributed significantly to the evolution of many identity advancements, from federation models to large-scale trust frameworks. However, I hope we will see a growing focus on Identity Governance and Administration adoption across the sector. Perhaps at a future TNC conference, we will hear about new approaches to decentralized identity governance that emerge directly from the unique challenges of research and education. Given the scale and complexity of these environments, the community is well positioned to help shape the next generation of identity governance.

If you’re interested in learning more about identity governance in academia, I encourage you to watch the presentations. If you’d like to catch my session, it begins at 27:12 (my pdf presentation is available here).

Slávek Licehammer

Head of Engineering at Evolveum

Slávek Licehammer is the Head of Engineering at Evolveum, the company behind midPoint, the leading open source Identity Governance and Administration (IGA) platform. With more than a decade of experience in identity management in higher education and public and private sectors, he helps organizations solve complex challenges in identity governance and security.

About Evolveum:
Evolveum is the EU-based company behind midPoint, the leading open source complete IGA suite recognized by Gartner and KuppingerCole. MidPoint gives organizations control, visibility, and efficiency to reduce identity risk, simplify compliance, and modernize identity operations.

The post TNC 2026: 3 Identity Trends from Europe’s Research and Education Community appeared first on Evolveum | Open Source Identity Management & Governance.

The award is organized by Hopero, the European Digital Innovation Hub in Slovakia, and the Kempelen Institute of Intelligent Technologies (KInIT), the first independent AI research institute in Slovakia, while the media partnership of the project is covered by Forbes magazine. From a strong pool of submissions, the evaluation committee selected four finalists for 2026, including Evolveum.

During an interview with KInIT, Martin Mareš, Senior Product Manager at Evolveum, and Anton Tkáčik, Backend Technical Lead and Developer at Evolveum, share insights into midPoint’s AI assistant midPilot and its role in accelerating application onboarding within identity governance and administration.

Can you tell us about your AI system and the problems it helps solve?
Today, up to 80% of cyberattacks exploit vulnerabilities related to user identities. Our open source platform midPoint naturally addresses this problem as a software for identity governance and administration (IGA). However, one of the most critical bottlenecks in deploying IGA solutions remains the onboarding of enterprise systems. Organizations often need to connect hundreds of applications and, for some of them, even develop custom communication interfaces – so-called connectors. This process tends to be both time-consuming and costly, and can significantly extend the implementation of the entire project.

MidPilot, midPoint’s AI assistant, brings a significant acceleration to this process while also reducing the need for deep technical expertise. Organizations thus gain a greater chance of successfully implementing an IGA solution, more efficient identity management, and an overall strengthening of security. The potential of our AI initiative is further confirmed by support from the European Union through Slovakia’s Recovery and Resilience Plan.

The AI Awards highlights systems built on the pillars of ethics, reliability, and privacy. Which of these aspects presented the greatest challenge during the development of your solution?
One of the main challenges of our solution is the trustworthiness of the AI service provider. What data is being shared? What happens to it after processing? Where does the entire system run? We operate in the field of cybersecurity, where these questions are even more sensitive and important than in a standard IT environment. That is why we involved our Chief Information Security Officer as well as the compliance department in the processes from the very beginning of the project.

We focused on three key pillars. The first is full transparency: the entire solution, including the default configuration, prompts, documentation, and guides, is published publicly as open source. We hide nothing, and the customer has complete visibility into how the system works. The second is data control. Before each use of AI, the user interface clearly displays what type of data will be sent for processing. The user has the option not to use the AI functionality, and a complete audit of submitted data is available, stored locally by midPoint. The third pillar is geopolitical and technological independence. The customer chooses their own architecture and the LLM models they use. The solution can run fully on-premise, and it is possible to use our AI service on private servers in the EU or to integrate other platforms and cloud services according to the organization’s security requirements. There is no vendor lock-in that would restrict the customer. Evolveum itself is a fully European company, built and owned within the EU, which supports adherence to European standards and ethical principles and strengthens technological sovereignty.

What specific mechanisms ensure that your solution remains under human control and stays secure in the long term?
Blind trust in an AI model does not work, and hallucinations are a risk, as are targeted attacks such as remote code poisoning. To prevent these risks, we built connector generation on three security principles.

The first is strict guardrails, as we do not let artificial intelligence generate arbitrary executable code. Instead, we created a special connector framework, a firmly defined and manually designed foundation into which AI only fills in the specifications of the system being connected. The second is declarative output, where the result is not an unpredictable script but a purely declarative connector. The model does not create program logic, it only describes the parameters and what is to be executed. This significantly reduces the space for introducing vulnerabilities. The third principle is human control. The entire process is designed to be iterative and interactive. The AI assistant gradually generates individual parts, from finding documentation to proposing tests, while the administrator immediately reviews, adjusts, or rejects each step. This reduces cognitive load while always keeping full control on the human side. We have thus turned unpredictable code generation into secure, managed, and auditable assistance where the human is always in the control loop.

Read the full interview on this page.

Martin Mareš

Senior Product Manager at Evolveum

Martin Mareš is a senior product manager with a strong technical background and a passion for agile methodologies. He has more than 10 years of experience in the software industry, having progressed from backend developer through scrum master to product owner. Martin bridges technical delivery with strategic product vision, and his current challenge is leading the development of the AI assistant midPilot.

Tony Tkáčik

Backend Technical Lead and Developer at Evolveum

Anton Tkáčik has more than 12 years of experience in developing and managing open source software. In the past, he developed high-performance model-driven software and worked on the design and implementation of modeling languages. He currently focuses on the design of libraries, concepts, and interfaces intended for AI to generate functional code.

---

The post Evolveum Named AI Awards 2026 Finalist for Trustworthy AI appeared first on Evolveum | Open Source Identity Management & Governance.

We were honored to welcome AMI Praha and Capitar Security as Gold Sponsors, DAASI International, ITConcepts, and IBA Group as Silver Sponsors, and IAM Factory and CSIT as Bronze Sponsors. Their support played a key role in making the meetup a truly memorable experience for all participants.

Three Workshops as a Starter and Dual Streams as the Main Course

The meetup began with three hands-on workshops designed to provide both practical experience and deeper insight into midPoint’s capabilities. In AI Assisted Integration of First Systems with MidPoint, Ivan Noris and Tadeáš Chrapovič guided participants through connecting real systems to midPoint, exploring data structures, defining object types, and working with correlations, mappings, and associations – all enhanced by new UI/UX improvements and optional AI assistance directly in midPoint. In Connector Development Methodology, Tony Tkáčik and Matúš Macík introduced a new declarative approach to connector development that reduces boilerplate, improves readability, and accelerates integration, including how AI-assisted generation can automate most of the implementation. The Bring Your Own Problem workshop with Radovan Semančík and Slávek Licehammer opened the floor to real-world challenges, discussing practical deployment issues, best practices, and common anti-patterns from midPoint implementations.

These workshops were followed by two parallel streams of sessions focused on midPoint features, real-world deployments, and practical experience sharing, led by community members, partners, customers, and the Evolveum team. Highlights included Trench Group’s carve-out journey in the energy sector and rebuilding their IGA landscape in just four months, the European Commission’s perspective on identity modernization, and Nomura Research Institute‘s large-scale access certification setup managing over 3,000 campaigns per cycle for more than 50,000 users. Additional sessions covered regulatory challenges in identity governance within the EU, including NIS2 and DORA, as well as Techniker Krankenkasse’s large-scale midPoint-based identity platform managing tens of thousands of identities, systems, and automated processes.

On Thursday, May 14, a dedicated closed-door partner stream further expanded the program with a focus on business, strategy, and ecosystem development. Apart from the Evolveum team sessions, a success story from AMI Praha was presented on company growth, and there was an open discussion with partners.

Engaging Panel Discussions and Birds of a Feather

Throughout the meetup, attendees took part in several panel discussions that sparked lively exchanges and brought together diverse expert perspectives. Alongside them, the Birds of a Feather session offered an informal and interactive format where speakers primarily introduced topics and guided open community discussion:

• MidPoint in the Cloud or On Premise
• MidPoint in High-Performing Environments
• Practical Experience with IAM for Non-Human Identities
• IGA, midPoint, and AI
• Birds of a Feather: Brainstorming on the Future MidPoint Features

These discussions formed an integral part of a rich four-day program featuring contributions from the Evolveum team, partners, customers, and various experts. Each session added valuable insight into real-world challenges, technical expertise, and future-oriented strategies, fostering open dialogue, cross-community learning, and practical collaboration among participants.

MidPoint Roadmap and What Lies Ahead

The meetup also included a session on the midPoint roadmap led by our Interim Chief Product Officer Pavol Mederly. He provided a high-level preview of midPoint 4.11 and highlighted key roadmap themes shaping the platform’s future, with a focus on midPilot, the rapid application onboarding AI assistant, as one of the standout innovations. The session also encouraged open discussion on upcoming developments and the future direction of the platform.

Grand Finale: Unconference with Community-Driven Discussions

The final day of the 2nd Annual MidPoint Community Meetup was dedicated to the unconference – an open, participant-driven format focused on community exchange and peer learning. The day began with a one-hour agenda-setting session, where attendees collectively selected nine topics from a broader list of suggestions. These were then explored in three parallel tracks across three rooms, creating a dynamic space for interactive discussions, knowledge sharing, and practical problem-solving.

The conversations covered a wide range of topics, including roles and role design, pending operations on shadow objects, documentation and community communication, role persona and multi-contract scenarios, EUPL 1.2, UX improvements for certifications and sponsor portal applications, attribute handling during account provisioning, staging environments (DEV–QA–PROD), and real-world use of AI in midPoint. The unconference once again highlighted the strength of the community, bringing together users, integrators, and Evolveum experts in a collaborative setting where ideas turned directly into actionable insights.

Recognizing Community Efforts with the MidPoint Community Award

We were glad to present the MidPoint Community Award 2026 to Martin Lízner, Chief Solution Architect at AMI Praha, in appreciation of his dedication, expertise, and long-standing contribution to midPoint and the wider community.

Sometimes The Best Conversations Take Place Outside The Sessions

Alongside the main program, attendees had the opportunity to experience Prague in a more informal and engaging way. A guided walking tour through the historic city center offered a chance to explore the city together, while a friendly chess tournament sparked strategy, focus, and conversation in a relaxed setting. The second morning began with a 5 km group run through Prague, bringing early risers together for a fresh start to the day, and the evening concluded with a drinks reception sponsored by IAM Factory, creating space for networking, discussions, and community building in a more casual atmosphere.

Thank You & See You Next Time

To everyone who joined us in Prague – thank you! It has been inspiring to see the event grow year by year, bringing an even broader community together. Your energy, curiosity, and engagement made this meetup more than just a conference. It became a true celebration of the community.

If you missed this year, we hope to see you next time – to learn, connect, and help shape the future of open source identity governance and administration with midPoint and midPilot, its AI assistant for rapid application onboarding.

 

 

 

 

 

 

 

 

 

 

 

 

---

The post 2nd Annual MidPoint Community Meetup: Where OSS IGA Meets Digital Sovereignty appeared first on Evolveum | Open Source Identity Management & Governance.

The 2nd Annual MidPoint Community Meetup is almost here and this year, it’s bigger, more hands-on and happening right in the heart of Prague. For those of us living in the world of identity governance and administration (IGA), this is the only event to attend to explore the future of open-source identity security.

Whether you’re a seasoned midPoint architect or just beginning your IGA journey and planning to attend, here’s everything you need to know to make the most of your experience at this IAM event.

Key information

Date: May 12-15, 2026
Location: Hotel Don Giovanni, Prague, Czech Republic
Format: 3.5 day in person event
Audience: All identity and cybersecurity experience levels

Why attend?

While the event centers around the open-source IGA platform midPoint, it’s not a vendor showcase. Instead, it’s a practitioner-first identity security event focused on real deployments.

Attendees get a rare opportunity to sit across the table from the Evolveum engineering team and hear unfiltered case studies from major players like the European Commission, Techniker Krankenkasse, Mollie and Trench Group. It’s a space where the community drives the agenda, ensuring that the program is built around the challenges attendees actually face every day.

A look at the 2026 agenda

The four-day schedule is designed to move from technical foundations to high-level strategy, ending with an “unconference” where you choose the topics to discuss.

Tuesday, May 12: Workshops, deep dives and a product roadmap unveiling

• “Bring Your Own Problem” workshop: A hands-on workshop where you can get direct feedback on your specific deployment hurdles from Evolveum experts.

• Energy sector success story: A deep dive into how Trench Group rebuilt their entire IGA strategy from the ground up in just four months.

• Digital sovereignty: Insights from the European Commission on maintaining control over identity data in a global word.

• The midPoint roadmap: An exclusive preview of upcoming features and the long-term vision for the platform.

Wednesday, May 13: Identity security in practice

• Meet midPilot: A live demonstration of the new AI-powered onboarding assistant, built to make onboarding complex applications much faster.

• Navigating regulations: A session with Rowan Legal on how shifting EU regulations are changing the way we handle identity security.

• Deployment stories: Real-world implementation stories and lessons learned from Techniker Krankenkasse and Mollie.

May 14: Beyond human identity and more customer stories

• Non-human identity management: How to handle the growing number of service accounts, bots, and AI agents to keep your organization secure.

• Practical security frameworks: How identity governance is handled by the teams at Fortuna and the Laboratoire national de santé.

May 15: The unconference

• Attendee-driven sessions: A half-day with no preset agenda. Attendees vote on the most pressing topics from the week to discuss in smaller groups.
  

Networking and Social Events

The program doesn’t stop when the sessions end. 2nd Annual MidPoint Community Meetup comes with a full social calendar to help you build lasting professional connections while enjoying the beauty of Prague:

• Prague walking tour (Tuesday): A relaxed afternoon exploring the historic city center and architectural landmarks with fellow attendees.

• Chess tournament (Tuesday): Test your tactical skills in a friendly, strategic competition at the hotel.

• Drinks on the Vltava river (Wednesday): The official drinks reception hosted on a riverboat, offering stunning views of the city skyline, sponsored by IAM Factory.

• IdentiBeer Prague: Join the inaugural IdentiBeer meetup in Prague for casual networking over world-class Czech lager.

Is this the right event for you?

2nd Annual MidPoint Community Meetup is tailored to anyone involved in identity management and governance. If you are currently running midPoint in production, thinking about switching from another IGA platform, or working as an integrator or consultant, you’ll find your tribe here. It is a unique chance for security leaders and engineers alike to get unfiltered access to the people building the platform and the peers facing the same challenges you are.

The post MidPoint Community Meetup 2026: Know before you go appeared first on Evolveum | Open Source Identity Management & Governance.

How did you first become interested in IGA and AI, and what inspired you to pursue it?

My journey into IT wasn’t entirely straightforward. Even as a child, I had the feeling that the only thing I was truly good at was mathematics. Later in high school, natural sciences were added to it. What I liked about them was that I didn’t have to memorize them – I just needed to understand them. And this way of thinking felt very natural to me.

After high school, I had many questions and couldn’t really imagine what my career in mathematics would look like. At that time, someone told me that computer science is essentially mathematics rewritten into code. That idea intrigued me, so I decided to try it. During my studies in computer science, I discovered that a computer scientist does not have to be only a highly technical, hardware-oriented person. It can also be someone like me – a girl whose strength lies in logical thinking, the ability to translate it into code, work with large amounts of data, and turn knowledge into algorithms and functional solutions.

And why IGA and AI? Data has always been both a challenge and a motivation for me. I am fascinated by how it can be processed, understood, and used to create intelligent solutions. That is why I eventually ended up in this field and at Evolveum – where analytical thinking, technology, and real-world impact come together.

Was there a moment when you realized you could shape the digital future through technology? Tell us about it.

Yes, that moment came during my first projects, where my code was actually deployed in practice. That was when I realized that technology is not just about writing code, but about creating solutions that have real impact – whether in predicting solar events, early detection of heart attacks from ECGs, or nowadays in simplifying complex processes in identity governance and access management.

My current work at Evolveum on midPoint in the IGA domain confirms to me every day that technology can shape the digital future in a very specific way. I am especially glad that this happens through open source, a model that brings value to the wider community.

What challenges do girls and young women still face in entering the tech and AI fields, and how can we overcome them?

Although IT is still often perceived as a male-dominated field, my personal experience has been very positive, and I have never encountered being underestimated because I am a woman. If I see any challenge today, it is rather the fact that young women sometimes underestimate themselves and their abilities. That is why I consider it important to create more support, role models, and opportunities so they can see for themselves that they also have a place in technology.

How do you see AI influencing opportunities for women in IT globally?

I believe AI will significantly expand opportunities for women in IT globally. It is not only about the emergence of new technical roles, but also about how AI connects technology with analytical thinking and the understanding of data, processes, and human needs. This can attract even more diverse talent into IT.

At the same time, it will be important for women not to be only users of AI tools, but also co-creators, because only then will they be able to directly influence what the digital future will look like.

What advice would you give to the next generation of girls who want to make an impact in AI and digital development?

I would like to tell girls not to be afraid to start and not to be discouraged by the feeling that they don’t know enough yet. I often come across the opinion: “It’s easy for you, you’ve been doing it for a long time.” The truth is that I also often start my day not knowing something. And that is exactly what makes this work so beautiful – exploring, being curious, designing solutions, making mistakes, learning from them, and sometimes starting over. It is not about having everything mastered right away, but about the willingness to learn and to move forward every day.

Viera Krešňáková

Senior AI/ML Developer at Evolveum

Bringing AI into identity governance and administration, Viera integrates intelligent models into midPoint to detect anomalies, predict access needs, and enable explainable, automated IGA decisions. She also designs explainable AI features to ensure that security teams can understand and trust the system’s decisions.

The post Women in AI: From Curiosity to Impact appeared first on Evolveum | Open Source Identity Management & Governance.

It all started during snack time. One child complained that story time was always rushed. Another pointed out that arts and crafts often got cut short because the teachers were busy preparing schedules, tracking attendance, and managing supplies. After an intense session of drawing, excited jabber, and passing notes under the table, they came up with a bold plan: a formal complaint to the teachers.

Their reasoning was surprisingly logical: if teachers were overwhelmed by manual processes, maybe there was another way to deal with them. And what better solution was there than midPoint, the EU-made and owned open-source platform that grown-ups use to organize hundreds of systems efficiently? According to the kids’ paper-detailed presentation, full of watercolor deployment schemas, adopting midPoint – and summoning its fairy unicorn AI helper, midPilot – would free up teachers’ time for what truly matters: playing, learning, and listening to the children.

The challenges they faced weren’t just small inconveniences – they were a fearsome multi-headed dragon of tasks: one head for schedules, one for attendance, one for supplies, and even one that consumed story time itself. With its magical AI powers, midPilot could swiftly connect all the classroom systems to midPoint – the central castle of the magical kingdom that managed all the teachers – organizing schedules, tracking supplies, and even whispering reminders about who needed extra attention that day. Together, midPoint and midPilot promised to slay the dragon, banish tedious tasks, and restore order to the kingdom, leaving teachers free to focus on the children and ensuring that no story time would ever be cut short again.

With the dragon under control, the teachers were free to focus on the children, giving every story time, craft project, and snack their full attention. The unicorn and the castle worked together like magic: repetitive tasks vanished, new apps got onboarded in a wave of a magic wand, and the kingdom ran smoothly. By the end of the week, the teachers had received a colorful stack of drawings, charts, and flow diagrams – proof that the kids were serious. Even preschoolers had figured it out: when the multi-headed dragon of manual tasks are defeated, there’s more time for what truly matters – learning, playing, and paying attention to each other. MidPoint and midPilot had shown the kingdom that efficiency isn’t just for grown-ups; even the smallest users understand its magic.

Happy April 1st!

The post Never Too Young For OSS IGA: MidPoint and MidPilot Saving the Preschoolers’ Day appeared first on Evolveum | Open Source Identity Management & Governance.

For CISOs, CIOs, and identity leaders, IAM conferences offer one of the best opportunities to stay current on emerging technologies, regulatory changes, and best practices in identity and access management.

Here are five identity security events worth adding to your 2026 calendar.

1. Gartner Identity & Access Management Summit

Best for: C-suite and IAM program leaders who want to benchmark strategy, validate roadmaps, evaluate IAM investments, and get direct access to Gartner analysts.
Location: London, UK (EMEA) | Las Vegas, Nevada (US)
Date: London: March 9–10, 2026 | Las Vegas: December 7–9, 2026

Gartner IAM Summit is often considered one of the most influential identity leadership events for CISOs and CIOs responsible for enterprise IAM strategy. The 2026 theme, Identity at the Core, reflects the growing recognition that IAM is no longer a standalone security function. Instead, it underpins business resilience, Zero Trust initiatives, AI adoption, and digital transformation. Sessions are grounded in Gartner’s primary research, drawing on thousands of conversations with security leaders worldwide. The event draws more than 1,500 peers and 20+ Gartner analysts, and offers 50 solution provider sessions.

Sessions typically cover:

• IAM program maturity models
• Identity governance and administration
• Privileged access management
• Identity-first Zero Trust strategies
• Agentic AI and Emerging Technologies

Why CISOs attend: Gartner’s website states that attendees can book one-on-one sessions directly with analysts to review their specific IAM roadmap. The program is built from primary research and is strong on strategy validation and vendor shortlisting.

2. European Identity and Cloud Conference (EIC)

Best for: Enterprise identity leaders and architects who want an analyst-driven view of where identity security is heading globally, with a strong European regulatory lens.
Location: Berlin, Germany
Dates: May 19–22, 2026

Organized by KuppingerCole Analysts, EIC brings together analysts, CISOs, IAM architects, and identity vendors to explore the future of digital identity. The 2026 theme, Pioneering Digital Identity Ecosystems, focuses on how identity security must adapt as AI automation accelerates and non-human identities expand the attack surface. Key topics include:

• AI supply chain risk and machine identity governance
• Modern IGA for cloud-first environments
• Cross-border trust frameworks
• Decentralized identity and digital identity wallets
• Privacy-by-design for digital identity

The conference typically attracts more than 1,000 identity professionals and features 200+ sessions across identity, security, privacy, and governance.

Why to attend: EIC gives identity and security leaders a structured, research-backed view of where the market is heading, which is valuable for long-term strategy, regulatory planning, and understanding how peers across Europe are approaching identity transformation.

Watch Evolveum’s Head of Engineering Slavek Licehammer’s talk at the EIC 2025 on how to govern non-human identities.

3. The 2nd Annual MidPoint Community Meetup

Best for: Identity leaders, system engineers, and architects who use or are evaluating IGA – with practical midPoint deployment examples, direct access to the product team, and a strong focus on European regulations and digital sovereignty.
Location: Prague, Czech Republic
Dates: May 12–15, 2026

The MidPoint Community Meetup is an annual event hosted by Evolveum, the team behind the open source identity governance and administration platform midPoint. The 2nd Annual MidPoint Community Meetup brings together IGA newcomers, midPoint users, integrators, and Evolveum product and solution engineering teams for a focused, hands-on 3.5 day program. The 2026 focus areas include:

• Practical IGA implementation and real-world deployment examples from companies like the European Commission and Trench Group
• AI-powered identity governance in a safe, human-centered way
• The midPoint product roadmap and features under development
• Identity lifecycle automation and IGA best practices
• Compliance and policy modeling in open source environments

The event is intentionally intimate, designed for hands-on workshops and “bring your own problem” sessions, drawing over 200 peers across a 3.5-day format.

Why to attend: For teams running midPoint or evaluating open source IGA, the 2nd Annual MidPoint Community Meetup offers a level of direct product access and community depth that no large conference can replicate. Content is shaped by the community, not analysts or sponsors.

A tour of the historic center of Bratislava during the MidPoint Community Meetup 2025.

4. Identiverse

Best for: Identity professionals across all roles – developers, architects, and security leaders who want practitioner-level depth across the full IAM spectrum.
Location: Mandalay Bay, Las Vegas, Nevada
Dates: June 15–18, 2026

Identiverse is the largest event dedicated entirely to digital identity, convening over 3,000 security professionals. The 2026 program is built around four defined content pillars: AI identity, continuous identity, passkeys & wallets, and non-human & agentic AI identity. Key topics include:

• Passwordless authentication, passkeys, and digital wallets
• Identity protocols and emerging standards (OAuth, OpenID Connect, FIDO, CAEP, OpenID AuthZEN)
• Non-human identity and agentic AI access management
• Identity orchestration and continuous authentication
• Identity threat detection and response (ITDR)

The agenda is curated by an independent content committee and offers up to 20 CPE credits.

Why to attend: Identiverse goes deeper on identity protocols and engineering than most IAM events, making it a go-to conference for identity engineers and architects.

5. Identity Week

Best for: Security leaders working at the intersection of enterprise IAM and physical identity in regulated industries or government-adjacent sectors.
Locations: RAI Amsterdam, Netherlands | Washington, D.C.
Dates: June 9–10, 2026 (Amsterdam) | September 2–3, 2026 (D.C.)

Identity Week sits at the intersection of digital identity, physical identity, and biometrics. The 2026 theme, Identity 2030: Building Trust Across Borders, Platforms, and People, focuses on trust across jurisdictions and industries. Key topics include:

• Synthetic identity fraud and AI-generated impersonation
• Continuous behavioral authentication
• Mobile driver’s licenses (mDLs) and digital travel credentials (DTCs)
• EES and ETIAS interoperability for EU border management
• Convergence of physical and digital document security

Identity Week is the largest event on this list, attracting 4,000+ attendees. The Americas edition is introducing new programming on cross-sector financial crime and fraud for 2026.

Why to attend: For security leaders whose identity strategy touches identity verification, biometrics, or regulated digital credentials.

Final thoughts

Identity security is rapidly becoming the primary control plane of modern cybersecurity. With the rise of machine identities, AI-driven attacks, and identity-based threats, IAM is a strategic priority for CISOs and CIOs alike. Attending conferences is one way to quickly get up to speed with the latest trends and stay ahead of the technologies shaping the future of identity security.

The post Top 5 IAM Conferences and Identity Security Events to Attend in 2026 appeared first on Evolveum | Open Source Identity Management & Governance.