Germany – Software package and information systems – IAM Tool

Opportunity description

The aim is to manage user identities, roles and authorizations centrally, automatically and in an audit-proof manner in the future. The scope of services includes the provision of the IAM software, complete implementation and integration into the existing IT infrastructure, migration of existing data, comprehensive testing, and ongoing German-language support. The solution must be operated entirely within the ALDB infrastructure. The licenses are to be provided for a minimum term of two years and a maximum of four years. The functional requirements include in particular joiner, mover and leaver processes, role and authorization management, access requests, approval workflows, identity governance, administration, reporting, audit logging, and interfaces to existing systems such as Active Directory, HR systems, databases and Kubernetes environments. In addition, a secure backup and recovery concept, minimum availability of 95% per month, and regulated training and acceptance processes are envisaged. Production deployment is to take place no later than 01.12.2026 following a successful testing and acceptance phase. An exit concept must be provided for the end of the contract. The project comprises the following service components: a) Provision of the IAM software solution (on-premise) The contractor must provide the offered Identity & Access Management (IAM) solution as an on-premise solution. This includes all software licenses, including all modules and functionalities required to meet the functional, technical and security-related requirements defined in this service description. The licensing must enable the management of the envisaged number of user identities, roles, authorizations, target systems and applications and ensure needs-based scalability to support future expansions of ALDB's IT landscape. b) Consulting services, implementation and integration The contractor is responsible for the complete planning, implementation, configuration, parameterization, integration, commissioning, test support, and functional and technical assistance throughout the entire project term. The scope of services includes in particular the integration of the IAM solution into ALDB's existing IT infrastructure, including the connection of all agreed source and target systems, Active Directory, Microsoft Entra ID, Kubernetes environments, and other business-critical applications. In addition, the organizational structure, the role and authorization concept, Identity Lifecycle Management, provisioning and deprovisioning processes, approval workflows, access requests, recertification processes, and audit and reporting functions must be implemented and configured. All implementation and integration work must be carried out in such a way that ALDB's ongoing business operations are not impaired. c) Testing Following the award of the contract and before production deployment, a test environment must be provided that corresponds as closely as possible to the subsequent production environment. Before go-live, comprehensive functional, technical, integration, security-related, and functional acceptance tests must be carried out. Production deployment may take place only after all tests have been successfully completed and written approval has been granted by ALDB. d) Migration The contractor is responsible for the complete planning, execution and documentation of the migration in coordination with the contracting authority. As part of the migration, all user identities, roles, authorizations, organizational structures, configurations, and all data required for operating the IAM solution must be transferred completely, consistently and without data loss to the new system. The migration must be carried out in such a way that interruptions to production operations are reduced to a minimum and the integrity of all data remains guaranteed at all times. e) Customer Support The IAM Customer Service to be provided by the contractor includes technical support, operation, maintenance, and the continuous further development of the implemented Identity & Access Management solution in accordance with ALDB's functional and technical requirements. The service meets the requirements for KRITIS requirements and is German-language support. The scope of services includes in particular incident and problem management, fault analysis and fault resolution, software updates, hotfixes, patches and security-related updates, as well as support with configuration changes, change requests, expansions, and the integration of additional source and target systems. Furthermore, the contractor supports ALDB in optimizing existing Identity and Access Management processes, further developing the role and authorization concept, and implementing new functional and regulatory requirements. Procedure: open. Review the original TED notice for the complete requirement, lots, amendments and attachments.