Software package and information systems

Tender description

The Contractor will provide an enterprise Identity and Access management solution that meets or exceeds the following requirements: 1. Establish a digital identity with appropriate roles and attributes for each person in the organisation that can be used to authenticate and authorize to both on and off premise resources. 2. Implement a complete Identity Lifecycle management solution to include the central authoritative provisioning and licensing of new accounts for all types of user, staff, student, associate or visitor whether on or off premise and the central authoritative de-provisioning of accounts that are no longer required. 3. Provide Single Sign On (SSO) capability across on and off campus applications and resources from both mobile and desk based devices. These applications to include Blackboard, Banner, E5, CoreHR, Office365, MS SharePoint online, MS SharePoint on premise, MS Dynamics online and a range of bespoke .Net and PHP applications. 4. Provide Multi-Factor authentication solutions for resource access both on and off premise. 5. Provide appropriate Authorization (Authz) through centralised Role Based Access Control (RBAC) to all University applications on and off premise to include provision for multiple roles, for example, where a member of staff is also a part-time student. Roles and permissions to be maintained in a central directory service or across directory services with a single management interface and integrated with the corporate application portfolio. It shall be possible to devolve role based management using work-flow and approval processes. 6. Produce appropriate IAM Governance policies for the Ulster Identity Lifecycle, Access Management and new application integration. 7. Facilitate devolved staff responsibilities for the effective administration and operational support of the new IAM solution. 8. Provide a central auditing and reporting function across all the above functionality. As part of the proposed solution, the Contractor shall detail how the following would be addressed.