Germany – Software package and information systems – Provision of IdentityManager standard software with the One Identity Safeguard PASM module and connectors

Opportunity description

The subject of the contract is the temporary provision of the IdentityManager standard software with the specified modules. This includes: - Right to use the functions of the applications, including the specified modules, for individual users in accordance with the total quantity defined further below - Costs incurred by the manufacturer in operating the software, subject to the requirement that the software, together with the specified modules and including all data storage, must run on systems located within the EU and protected by the requirements of the GDPR - Costs incurred by the manufacturer in operating the software, subject to the requirement that dedicated, separate virtual/logical infrastructure is used by the manufacturer to run the software, ensuring strict separation of the software instance used by ILB, including data storage, from other customers who use the same functions from the manufacturer. - Standard support from the product manufacturer - Right to use various connectors within the period covered by the acquired right to use the software. - Separate instances for production systems ("production instance") and development and test systems ("test instance") Further information on the characteristics and functionality of the software concerned is provided in Part B, Service Description. One Identity Manager from OneI-dentity Base Engine: One Identity Manager is market-leading standard software for Identity Governance and Administration (IGA) that centrally manages user accounts, access rights and the associated risks in complex IT landscapes. The software enables seamless, transparent and audit-proof management of identities across on-premises, hybrid and cloud environments. One Identity Safeguard PASM: The core module secures the entire lifecycle of privileged credentials; passwords and SSH keys are stored in a hardened vault (appliance or SaaS) and rotated automatically. Credentials are released exclusively through a policy-based workflow with optional approval stages (e.g. dual-control principle, time-limited access). In addition, this module acts as a proxy and records all administrative sessions (e.g. via RDP and SSH) in full. The recordings include video, keystrokes and metadata. All data traffic is monitored in real time, with predefined rules enabling the immediate blocking of suspicious or unwanted actions. This ensures complete, audit-proof traceability. Connectors: Licenses must be offered for the interface integrations listed in Chapter 1.1 - Application List. Note: a different term of varying length is required for each connector. Procedure: open. Review the original TED notice for the complete requirement, lots, amendments and attachments.