Objectives

The primary objective of this tender is to appoint a qualified and experienced service provider to supply, implement, support, maintain, and deliver managed services for an Identity and Access Management (IDAM) system. The contract duration is five (5) years, aiming to enhance ATNS's security, authentication, and access control capabilities across its applications and infrastructure.

Scope

The scope encompasses:

• Provision of an IDAM solution that integrates with ATNS applications for account provisioning and de-provisioning.
• Support for mainstream authentication protocols such as SAML, OAuth, and OpenID.
• Implementation of single sign-on (SSO) and multi-factor authentication (MFA).
• Role, group, and permission management with flexible configuration.
• Self-service functions like password resets.
• Provisioning workflows, operational reporting, and system documentation.
• Support for system demonstration, testing, and training.
• Support for ongoing support, maintenance, licensing, and managed operational services over five years.

Technical Requirements

The IDAM system must meet the following technical criteria:

• Integration with ATNS applications for account lifecycle management.
• Support for authentication protocols: SAML, OAuth, OpenID.
• Support for SSO across ATNS systems.
• Support for MFA on user, role, or group basis, including methods like SMS, biometrics, apps, etc.
• Extensible role and permission models, including RBAC and workflow approvals.
• Support for session controls such as timeout, re-authentication, and single logout.
• Operational reporting with customizable dashboards and security incident reports.
• System documentation, manuals, and training materials.
• Demonstrable system capabilities during the evaluation process.

Skills Requirements

The successful service provider must demonstrate:

• Proven experience in deploying and supporting IDAM solutions with at least five (5) years of support, maintenance, and after-sales support.
• Technical expertise in integrating IDAM with enterprise applications and authentication protocols.
• Capability to support system configuration, workflow management, and reporting functionalities.
• Ability to provide comprehensive documentation, user manuals, and training.
• Experience in system demonstration, testing, and user acceptance testing (UAT).
• Knowledge of security standards, POPIA compliance, and data protection laws.
• Capacity to deliver managed services including provisioning, monitoring, and operational support over the contract period.