Managed Multi-Factor Authentication (MFA) Service

The contract seeks a cloud-based, managed multi-factor authentication solution to enhance security for state systems by enabling secure access through multiple authentication methods and seamless integration with existing identity providers. The service must be fully managed, ensuring continuous operation, scalability, and compliance with state security standards, while supporting a range of user authentication options such as push notifications, one-time passwords, bio-verification, and hardware tokens. The provider will be responsible for maintaining infrastructure, monitoring threats, performing updates, and delivering technical support to ensure uninterrupted access for authorized users across state agencies. The solicitation, posted on July 1, 2026, with a response deadline of September 15, 2026, is issued under the NAICS code 518210 for data processing and hosting services and is classified as a subcontract. The contracting agency is the California Statewide STPD, and performance is expected to support the broader state enterprise environment. While specific location details are not provided, the solution must be accessible statewide and capable of serving diverse organizational needs. The contract emphasizes operational reliability, security compliance, and integration readiness, with no set-aside provisions indicated, allowing qualified vendors to compete for the opportunity to deliver a robust, scalable MFA platform.