GSA IDENTITY, CREDENTIAL, AND ACCESS MANAGEMENT Nextgen Credential Management Support Request for Information THIS IS A REQUEST FOR INFORMATION (RFI) NOTICE ONLY. THIS IS NOT A REQUEST FOR PROPOSAL (RFP). NO SOLICITATION IS AVAILABLE AT THIS TIME. The purpose of RFI Amendment 02 is to extend the response date to August 07, 2020. 1.0 BACKGROUND The General Services Administration (GSA) provides an end-to-end Personal Identity Verification (PIV) Credential issuance and PIV Credential maintenance solution to the Federal Government via its Homeland Security Presidential Directive 12 (HSPD-12) Managed Service Office (MSO), also known as the USAccess program. Since its inception in 2007, the program has issued approximately 1.2 million PIV cards and there are approximately 600,000 active cards across 105 customer agencies. MSO provides the operation, maintenance, and enhancements of the USAccess system (Identity Management System [IDMS], Credential Management System [CMS]), the related interfaces, enrollment, activation, and issuance infrastructure, and customer support. MSO USAccess’s contractor provides all hardware, software, and interfaces necessary to operate, maintain and enhance the system throughout the period of performance. The system maintains a GSA Authority to Operate (ATO) at a Federal Information Processing Standard (FIPS) 199 Security Categorization of HIGH. Current and future smartcard solutions include Personal Identity Verification (PIV), PIV-Interoperable (PIV-I), derived PIV and temporary smart cards with physical and logical access capabilities. The MSO USAccess Program has separated the current business functions into core and non-core services. Current core services include: Identity Management System Credential Management System System Infrastructure Provider (SIP) Support/Mechanism Help Desk Credentialing Infrastructure/Shipping (CONUS, OCONUS, and International) Registrar Training Data migration specialist Current non-core services include: Certificate Authority (CA) Card Personalization (Electronic and Graphical) Card Printing Cardstock provided Role holder refresher training USAccess provides the continuity of service to customer agencies’ cardholders and agency system operators. GSA’s success as a service provider to the Government depends heavily on an environment of continuous improvement. The current USAccess system interfaces with card personalization, card printing solutions vendors, multiple CA vendors for the supply of Public Key Infrastructure (PKI), certificates for PIV cards, PIV-I cards, and derived PIV credentials. This solution is in use across the federal workspace. The envisioned new USAccess system would perform all of these functions in an innovative, streamlined manner and have the agility to change with new technologies. MSO USAccess Program provides mission critical, Government-wide contractor managed services for identity and credential management services including 1) applicant sponsorship, enrollment, biometric submission (for background investigation purposes); 2) credential issuance, maintenance (certificate rekey) and management and 3) Biographic & Agency Specific Sponsorship Record maintenance. USAccess provides a solution that minimizes disruption to USAccess Customer Agencies and maintains the full life and functionality of the currently existing, 600,000 issued active PIV cards and credentials during and after the transition process. GSA seeks to improve its understanding of market capabilities and to identify qualified vendors that are capable of providing innovative approaches and technologies for identity management. 2.0 REQUESTED INFORMATION GSA is looking for vendors that can provide innovative technologies and approaches for Identity Management. GSA is looking for innovative-emerging technical solutions in the following areas: Identity Proofing Identity authentication Credentialing Service solutions Software applications to streamline credentialing and reduce hardware footprint Data storage/data protection Alternative to the smartcard authenticator 3.0 VENDOR QUESTIONS 1. Which Identity Management service area is your company able to provide? Provide a full description of your solution to include Data Migration where applicable. 2. What innovative approaches can your company provide to help innovate Card Issuance services? 3. Provide a description of 3 similar past performances. Include the following information as applicable: Contracting agency Contract number Period of performance Contract value Type of contract Contracting officer name, email, and phone number List of corrective actions 4. Is your solution able to scale up or down in order to meet the demand of onboarding new customer agencies? Discuss the capacity of your solution. 5. What makes up your solution – COTS or proprietary software or hardware? What type of APIs does it come with? Does it require special hardcoding? 6. List any specific certifications or designations that your firm has. All interested parties should respond to this RFI with a detailed description (solution diagram, functionality, benefits, interoperability, and customer references) of their offerings that address the various components of the MSO service offering and answers to the questions listed above. Respondents are also encouraged to respond to one or more functional areas in the MSO service offerings. GSA reserves the right to conduct one-hour demonstrations with selected vendors. 4.0 QUESTIONS Questions regarding this announcement shall be submitted in writing by e-mail to
[email protected]. Verbal questions will NOT be accepted. Answers to questions will be posted to beta.SAM.gov now known as Contract Opportunities. The Government does not guarantee that questions received after 04:00 PM EST July 10, 2020 will be answered. The Government will not reimburse companies for any costs associated with the submissions of their responses 5.0 RESPONSE GUIDELINES Responses should be submitted to Nichole Cabral at
[email protected] no later than 04:00 PM, EST August 07, 2020. Responses should be limited to ten pages and utilize Arial font, 12 point, and 1-inch margins. The cover letter, table of contents and experience are excluded from the 10 page limit. The response should not exceed a 5 MB email limit for all items associated with the RFI response. 6.0 DISCLAIMER This RFI is not a Request for Proposal (RFP) and is not to be construed as a commitment by the Government to issue a solicitation or ultimately award a contract. Responses will not be considered as proposals nor will any award be made as a result of this synopsis. If a solicitation is released, it will be synopsized on the beta.sam.gov website. Potential responders are solely responsible for monitoring this site for additional information pertaining to this requirement. All information contained in the RFI is preliminary as well as subject to modification and is in no way binding on the Government. FAR clause 52.215-3, “Request for Information or Solicitation for Planning Purposes”, is incorporated by reference in this RFI. The Government does not intend to pay for information received in response to this RFI. Responders to this invitation are solely responsible for all expenses associated with responding to this RFI. This RFI will be the basis for collecting information on capabilities available. This RFI is issued solely for information and planning purposes. Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received in this RFI that is marked “Proprietary” will be handled accordingly. Please be advised that all submissions become Government property and will not be returned nor will receipt be confirmed. In accordance with FAR 15.201(e), responses to this RFI are not offers and cannot be accepted by the Government to form a binding contract.