Identity Management System Solution

The Vendor is required to provide identity management system solution platform must include, but not be limited to, the following specifications based on a legacy identity management system developed within the PeopleSoft environment to a moder third party identity governance and administration (IGA) platform:
• Must be able to support higher education environment with multiple institutions under a single system across the state.
• Cover large-scale identity management needs: over (1.7) million identities and approximately (240,000) active users annually.
• Handle user population: students (credit, non-credit, dual enrollment, and alumni), faculty, staff, adjunct professors, contractors, and consultants, and temporary workers.
• Provide secure, scalable, and centralized identity and access management (IAM).
• Enable seamless integration with existing systems and applications.
• Deliver an enhanced user experience for students, faculty, and staff.
• Be cost-effective for higher education budgets.
- Functional requirements:
1. Identity lifecycle management
• Automate onboarding, role assignment, and off boarding (with timely revoking of access and termination of all active sessions) for all user types, with a proven strong student lifecycle process.
• Support multiple affiliations for a single user across institutions.
• Handle contractors, adjunct faculty, and others who do not pass through hr systems.
2. Identity governance
• Enforce policy-driven configurations consistently across all institutions.
• Provide centralized governance with flexibility for individual colleges to maintain autonomy.
• Include user-friendly audit and compliance reporting capabilities.
3. Authentication
• Support multi-factor authentication (MFA) with multiple methods:
• Push notifications
• Alternate email
• Time-based one-time password (TOTP)
• U2f FIDO tokens
• Enable single sign-on (SSO) for all applications and services.
4. Integration capabilities
• Seamlessly integrate with existing systems, including, but not limited to:
• Student information systems (e.g., oracle/PeopleSoft campus solutions)
• Learning management systems (blackboard)
• Productivity suite (office 365)
• Financial management system (FMS oracle/PeopleSoft)
• Human capital management (HCM oracle/PeopleSoft)
• Decision support system (oracle analytic server)
• Entraid
• Active directory
• Support distributed identity and access management (IAM) for shared services while maintaining local control.
5. Scalability & performance
• Capable of managing over (1.7) million identities.
• Support concurrent access for (240,000) active users.
• Provide high availability and disaster recovery options.
• Student onboarding/off boarding at large scale
6. Other requirements:
• Self-service password resets
• Detailed audit logs for compliance and security monitoring
• Threat detection and response
• Low code environment that can be managed with limited IDM staffing
• Time efficient implementation
• Near real-time updates in system for account provisioning and DE provisioning, as well as security access requests
• Integrate with major SIEM platforms, including but not limited to elastic SIEM in AWS, with the ability to securely ingest and retrieve required log data.
• Username creation following our template, with no reuse of username.
• History kept for usernames and email addresses.