Strengthening midPoint security and preparing for the EU Cyber Resilience Act

Posted on 24th September 202625th September 2026 by Mita Chu

The EU Cyber Resilience Act (CRA) is now in force, establishing cybersecurity requirements for products with digital elements. While the main CRA obligations will apply from December 2027, organizations developing and maintaining software products need to start preparing well in advance. As part of our ongoing commitment to the security and long-term development of midPoint, Read more about Strengthening midPoint security and preparing for the EU Cyber Resilience Act[…]

Toxic Combinations, Handled: Enforcing Segregation of Duties Across Systems with MidPoint

Posted on 23rd September 202624th September 2026 by AMI Praha

This article was written by our Gold implementation partner, AMI Praha, as part of our MidPoint in Practice series, where partners share real-world implementation stories highlighting how they solve identity governance challenges with midPoint. About AMI Praha: AMI Praha is a system integrator operating in the ICT security segment that specializes in authentication / authorization Read more about Toxic Combinations, Handled: Enforcing Segregation of Duties Across Systems with MidPoint[…]

AI Agent Governance: How to Safely Deploy and Manage AI Identities

Posted on 11th September 20265th October 2026 by Mita Chu

AI agents are becoming digital coworkers. So much so that Gartner predicts that by 2028, an average global Fortune 500 enterprise will have over 150,000 agents in use – up from less than 15 just last year. Even if that projection turns out to be way too optimistic and the actual numbers will land somewhere Read more about AI Agent Governance: How to Safely Deploy and Manage AI Identities[…]

Name	Provider	Purpose	Expiry	More information
PHPSESSID	Evolveum s.r.o.	Cookie generated by applications based on the PHP language. This is a general purpose identifier used to maintain user session variables. It is normally a random generated number, how it is used can be specific to the site, but a good example is maintaining a logged-in status for a user between pages.	When you close your browser
moove_gdpr_popup	Evolveum s.r.o.	When this Cookie is enabled, these Cookies are used to save your Cookie Setting Preferences. You can enable or disable your Cookie Settings on our website at anytime via Cookie Settings.	1 year	Read more
wordpress_test_cookie	Evolveum s.r.o.	Tests that the browser accepts cookies.	Session	Read more
wp-settings-[user_id]	Evolveum s.r.o.	Used to preserve user’s wp-admin settings	1 year	Read more
wordpress_[hash]	Evolveum s.r.o.	On login, WordPress uses the wordpress_[hash] cookie to store your authentication details. Its use is limited to the Administration Screen area, /wp-admin/	Session	Read more
wordpress_logged_in_[hash]	Evolveum s.r.o.	Remember User session	Session	Read more
wordpress_sec_[hash]	Evolveum s.r.o.	This cookie is used to store your authentication details. Its use is limited to the admin console area, /wp-admin/	Session	Read more
wp-postpass_[hash]	Evolveum s.r.o.	This cookie is used to grant access to password protected areas of the site.	10 days
wp-settings-time-[user_id]	Evolveum s.r.o.	The number on the end is your individual user ID from the user’s database table. This is used to customize your view of admin interface, and possibly also the main site interface.	1 year	Read more

Name

Provider

Purpose

Expiry

More information

PHPSESSID

Evolveum s.r.o.

Cookie generated by applications based on the PHP language. This is a general purpose identifier used to maintain user session variables. It is normally a random generated number, how it is used can be specific to the site, but a good example is maintaining a logged-in status for a user between pages.

When you close your browser

moove_gdpr_popup

Evolveum s.r.o.

When this Cookie is enabled, these Cookies are used to save your Cookie Setting Preferences. You can enable or disable your Cookie Settings on our website at anytime via Cookie Settings.

1 year

wordpress_test_cookie

Evolveum s.r.o.

Tests that the browser accepts cookies.

Session

wp-settings-[user_id]

Evolveum s.r.o.

Used to preserve user’s wp-admin settings

1 year

wordpress_[hash]

Evolveum s.r.o.

On login, WordPress uses the wordpress_[hash] cookie to store your authentication details. Its use is limited to the Administration Screen area, /wp-admin/

Session

wordpress_logged_in_[hash]

Evolveum s.r.o.

Remember User session

Session

wordpress_sec_[hash]

Evolveum s.r.o.

This cookie is used to store your authentication details. Its use is limited to the admin console area, /wp-admin/

Session

wp-postpass_[hash]

Evolveum s.r.o.

This cookie is used to grant access to password protected areas of the site.

10 days

wp-settings-time-[user_id]

Evolveum s.r.o.

The number on the end is your individual user ID from the user’s database table. This is used to customize your view of admin interface, and possibly also the main site interface.

1 year

Name	Provider	Purpose	Expiry	More information
woocommerce_cart_hash	Evolveum s.r.o.	Helps WooCommerce determine when cart contents/data changes.	When you close your browser	Read more
woocommerce_items_in_cart	Evolveum s.r.o.	Helps WooCommerce determine when cart contents/data changes.	When you close your browser	Read more
wp_woocommerce_session_[hash]	Evolveum s.r.o.	Contains a unique code for each customer so that it knows where to find the cart data in the database for each customer.	2 days	Read more
tk_ai	Evolveum s.r.o.	Stores a randomly-generated anonymous ID. This is only used within the dashboard (/wp-admin) area and is used for usage tracking, if enabled.	Session	Read more
comment_author_{HASH} comment_author_email_{HASH} comment_author_url_{HASH}	Evolveum s.r.o.	When visitors comment on your blog, they too get cookies stored on their computer. This is purely a convenience, so that the visitor won’t need to re-type all their information again when they want to leave another comment.	These are set to expire a little under one year from the time they’re set.	Read more

Cookie settings

Strictly necessary

Third party

Technical