Authentication & Access Control (Non-SMS MFA)

The contract titled Authentication & Access Control (Non-SMS MFA) requires the implementation of robust multi-factor authentication mechanisms that explicitly exclude SMS-based methods, aligning with Zero Trust security principles. Solutions must leverage FIDO2 standards, biometric verification, or hardware tokens to ensure secure and phishing-resistant identity validation across all access points. This requirement is designed to significantly elevate the security posture of the Minnesota State Colleges and Universities System by eliminating the inherent vulnerabilities of SMS-based authentication. The contract is structured as a subcontract and falls under NAICS code 541512, indicating it pertains to custom computer programming services focused on security infrastructure. The solicitation was posted on July 13, 2026, with a response deadline set for July 28, 2026, giving potential vendors approximately two weeks to submit proposals. The contracting entity is the Minnesota State Colleges and Universities System, operating under the state of Minnesota, with no specific office address or point of contact provided in the data. All performance obligations are expected to support this agency’s broader digital security objectives, with no set-aside classification indicated. Interested parties must access the opportunity through the provided UI link to obtain full submission details and requirements.