Hosted SAML Single Sign On Authentication Solution

The Vendor is required to provide for a hosted, SaaS, cloud-based SAML single sign-on authentication solution to allow the library to authenticate university authorized users to library resources, primarily subscription research databases.
- Provide a SAML authentication solution to conform with the authentication standards employed by the university’s Information Technology unit for authentication to non-library university resources (e.g. Canvas, Microsoft Office 365, EagleNet, etc.).
- The library authentication solution should include the following functions/services:
•    Hosted SAML single sign-on authentication solution for libraries.
•    Software-as-service maintained and supported by the vendor.
•    Web-based user interface for client administrators to make customizations, monitor functionality, etc.
•    Ability to connect to Microsoft Entra id as the authentication method.
•    Service should support and facilitate the exchange of identity information between IDP and service providers, primarily subscription library databases, to allow library patrons to use SSO to log into the research databases to which libraries subscribe.
•    Service should facilitate trust relationship connections to a wide variety of library research database service providers.
•    Ability for the client to create and manage temporary login credentials specific to the hosted authentication system (not tied to Entra id/SSO) for situations in which library access should be granted to people who do not have SSO credentials.
•    Service should be able to provide IP proxy connections to subscription databases that do not support SAML authentication.
•    Service should have the ability to pass identity attributes to library databases to allow for a personalized database experience for library patrons.
•    Service should have the ability to restrict access to designated service providers (library databases) by identity attributes (i.e. User group types).
•    Service should provide detailed usage reports to the client either on demand by the client or periodically generated usage reports provided by the service.
•    Service should have the ability to grant access or set access restrictions within network by IP range.

- Contract Period/Term: 3 years
- Questions/Inquires Deadline: September 1 – 12, 2025