PEO EIS ICAM RFI

* Update: The RFI response date has been extended to 05 November 2021. There is no page limit for the responses. Responses shall be compatible with Microsoft Office or Adobe PDF. REQUEST FOR INFORMATION U.S. Army Program Executive Office Enterprise Information Services Project Director Enterprise Services (PD ES) THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. This RFI is issued solely for informational and planning purposes and does not constitute a Request for Proposal (RFP) or a promise to issue an RFP in the future. This notice does not constitute a commitment by the United States Government to contract for any supply or service whatsoever. Further, the Government is not at this time seeking proposals and will not accept unsolicited proposals. Any requests for a Solicitation will not receive a response. All information submitted in response to this announcement is voluntary. RFI respondents are advised that the Government will not pay for any information or administrative costs incurred in response to this RFI; all costs associated with responding to this RFI will be solely at the interested party's expense. Not responding to this RFI does not preclude participation in any future RFP, if any is issued. Statement of Need: This RFI is being used to conduct research by PD ES regarding the marketplace progression and technological advancement of Access Management and Single Sign-On technologies. The Army continuously evaluates its existing tools and technologies to better meet its unique and evolving requirements and serve its diverse user population. The Army is interested in identifying whether potential vendor organizations are capable of bearing the full scope and cost of meeting existing Army requirements across the strategic and tactical environment, including types of integrated authenticators, access management methods available, identity-aware proxy authentication, secure session management with deep packet inspection, types of federation protocols leveraged, and availability of a mobile software development kit (SDK). Due to the nature of the Army's mission and functions, vendors shall also list the highest authorized Federal Risk and Authorization Management Program (FedRAMP) Impact Level (IL) available for their solutions, roadmaps for future FedRAMP authorization, and timelines to achieve FedRAMP authorization. The Army will use the results of this RFI to evaluate its existing Authentication solution against current commercial vendor capabilities. No procurement action will be taken based off of the information provided. Background: The Army, and potentially the greater Department of Defense (DoD), has a large need for an enterprise-scalable login service able to serve relying party resources, whether located on-premises or in the commercial cloud. The Guard and Reserve in particular, as well as other irregular users of Army systems need a secure and user friendly means to authenticate to required Army resources, regardless of hosting location or service provider, and without need to use government furnished equipment, or government managed network access. The Army is in a continuous state of evaluating existing Identity, Credential, and Access Management (ICAM) capabilities to better meet the unique requirements and needs of its diverse user population. The Army is evaluating its existing Authentication solution with available vendor options to determine marketplace evolution and technological advancement. Questions: What type of integrated authenticators does your solution support? What type of access control methods does your solution provide? Does your solution provide identity-aware proxy authentication? Is your solution capable of secure session management with deep packet inspection? If so, how? What types of federation protocols does your solution support? Does your solution include a mobile SDK? If so, what? What is the highest authorized FedRAMP IL achieved for your solution? Do you plan for achieving higher FedRAMP IL? If so, what level and when? Do you currently have government customers? What is your licensing cost model (note: The Army has approximately 3 million users)? Are there different costs for different networks (i.e. Non-classified Internet Protocol Router Network (NIPRNet) vs Secret Internet Protocol Router Network (SIPRNet))? Are there different costs for different user types? What is your delivery model? How many operating points of presence do you offer? What are the hardware requirements of your solution? Will any hardware procurement be required? Is a third party system integrator required for platform/operating system (OS) operation and support (O&S)? Is a third party system integrator required for software operations and support (O&S)? Who is responsible for the deployment, integration, and administration of your software (i.e., professional services, systems integrator, etc.)? Is Implementation and technical support provided? Do you provide cyber monitoring and integration? What support do you provide for establishing and sustaining Authorization to Operate (ATO)? Does your solution allow for product expansion/customization? Response Submission Deadline: The RFI response should be in Microsoft Word and due to the Government point of contact listed below. Responses to this RFI shall be submitted no later than 29 October 2021. RFI submissions will be accepted as email attachment only. All responses shall be sent to joselyn.t.gray.civ@mail.mil with PEO EIS ICAM RFI in the subject line. Company Information in the RFI response should contain the following information: - Company name and mailing address - Company Point of Contact (to include Phone Number, and Electronic Mail) - Army Prime contract number (if applicable) Any proprietary information, MUST BE CLEARLY MARKED. To aid the Government, segregate proprietary information. Please be advised that submissions will not be returned. POCs: Joselyn T. Gray, joselyn.t.gray.civ@mail.mil, and Shelly Robacker, mary.m.robacker.civ@mail.mil.