docker pull evolveum/midpoint:4.5-alpine
MidPoint Quick Start Guide
- Install MidPoint
- MidPoint User Interface
- Next Steps
- MidPoint Repository
- Frequently Asked Questions
This guide describes steps how to quickly install and run midPoint, a comprehensive open source identity management and governance platform.
There are two ways how to download and install midPoint:
|Installation method||What to do?||What do you need?|
Download the package, unpack and run
Java runtime environment
Pull the image and run it
Install MidPoint From Distribution Package
Make sure you have Java 11 runtime environment installed on your machine. Java distributions based on OpenJDK are recommended, for example AdoptOpenJDK. Perhaps the best method to install Java environment is to use packaging system of your operating system. For example Debian/Ubuntu systems can use
sudo apt install openjdk-11-jdk.
Extract the package to a suitable location. The usual location is
/opt/midpointon Linux systems.
start.batscript, located in
MidPoint User Interface
MidPoint has a web administration user interface.
This is a primary user interface to use and configure midPoint.
By default, the user interface is accessible at port
Please log in to user interface as an
Have A Look Around
Administrator is an all-powerful user, therefore all the capabilities of midPoint are at your disposal. Feel free to have a look around. Some places of the user interface may be confusing, but you certainly find some fimiliar places:
Self service part of the interface is used to manage the identity and privileges of a user that is currently logged in.
Administration part of the user interface is used to manage user identities, roles, organizational structure and policies. This part is used for routine administration of the system. At this stage, this is perhaps the most interesting part of midPoint to explore.
Configuration part of the user interface is used to customize midPoint behavior, going deep into midPoint internals.
MidPoint is using terminology that is quite common in the identity management field, however it may be slightly confusing for people coming from other fields. Following list explain basic midPoint terms:
User means user record (profile) in midPoint database. This data record usually contains unified data, synchronized from source systems.
Resource is a remote system that is connected to midPoint. It may a source system that feeds data to midPoint. Or it may a target system, that is managed by midPoint.
Account is a data structure (user profile) that resides on resource (source or target system). MidPoint reads data from accounts, or manages the accounts.
Role gives privileges to users. Role may also specify which accounts on which resources a user should have.
Setting Up a Resource
MidPoint will not do much on its own. We need to connect midPoint to a source or target system (a resource) to see it shine. However, midPoint is very powerful and comprehensive system, there are many things that can be set up, customized and adjusted when a new resource is connected to midPoint. The configuration may be somehow overwhelming for a new midPoint engineer.
Therefore, the best strategy would be to start from a sample. Have a look at midPoint collection of midPoint resource samples and choose one of them to start from.
Navigate to Import object in midPoint menu and import the sample. Then navigate toto see your brand new resource in action. Click on the resource name brings you to resource details, where you can test connection to the resource. The tabs can be used to explore content of the resource. Just make sure you click on the Resource button (Search in:) to see live data.
MidPoint is a very rich system. It is in fact a platform, that can be customized to serve diverse environments. It will take some time to get an understanding how midPoint works. However, any time invested in learning midPoint will be paid back many times over.
There are three great ways how to start learning about midPoint:
MidPoint Book provides a general introduction to identity management, it explains how midPoint works, it provides examples, ideas and tips for midPoint configuration, deployment and use. This is the book to learn about midPoint. It is freely available for on-line reading and download.
Video tutorials on Evolveum YouTube channel. There is a series of tutorials that is based on the book. There are also other videos explaining various details of midPoint configuration and deployment.
Trainings organized by Evolveum. These are usually remote, instructor-lead trainings designed by midPoint authors.
There are also additional sources of information, that are usually suitable for engineers with some experience:
MidPoint is using embedded H2 database by default to store its data. The embedded H2 database is find for first steps with midPoint, demo environments, development and similar non-production purposes. It is not supported for any pre-production and production use. PostgreSQL database has to be used for any serious midPoint deployment. Please see native PostgreSQL repository page for installation details.
Frequently Asked Questions
MidPoint won’t start
Q: MidPoint won’t start, I cannot access the
A: MidPoint is a substantial software system. It usually takes 2-3 minutes for midPoint to start up. You can monitor the progress of midPoint startup by looking at midPoint logs.
Something went wrong …
Q: Something went wrong, I have no idea what is going on.
A: The best start to midPoint diagnostics is to have a look at midPoint logs.
In case of package-based deployment the log is located in
When using a docker image, the standard docker logging mechanism is used:
docker logs midpoint.
My first resource won’t work
Q: My first resource won’t work, there are connection errors, I can see no data, nothing works.
A: Have a look at the error message. You can expand the error message to get more details about the problem. However, please keep in mind that connecting new system to midPoint may be tricky. There are nice systems that use standard protocols and provide good error messages. However, many systems are not very nice. They deviate from standards, require exotic configuration and return cryptic error messages. It the resource does not work on the first try, it is usually helpful to learn more about midPoint and its workings. Have a look at the midPoint book, or check out the videos on Evolveum YouTube channel. That can help you to figure out the correct configuration to get your system connected.
Please check out MidPoint FAQs.