Identity and Access Management (IAM) Solution

Vendors for an enterprise Identity and Access Management (IAM) solution that can support centralized identity management, authentication, access control, lifecycle management, governance, application integration, and related security capabilities across the organization. The solution should support approximately 2,500 workforce identities and provide a scalable platform that can meet current operational needs while supporting future growth and evolving security requirements.
- IAM solutions that can preserve the capabilities currently in use while improving identity lifecycle automation, security, governance, application integration, administrative visibility, and support for specialized requirements such as Public Safety and CJIS-related use cases.
- The desired solution should also support integration with existing City systems, including Active Directory, Microsoft 365, HRMS/PeopleSoft, endpoint management, security monitoring platforms, and internally developed applications.
- solution must:
• Support approximately 2,500 workforce identities.
• Provide Single Sign-On for in-scope applications and support SAML 2.0 and OIDC.
• Support Single Sign-On (SSO) and Multi-Factor Authentication (MFA) for legacy on-premises Oracle PeopleSoft and eBusiness Suite applications that do not natively support modern federation protocols such as SAML 2.0 or OIDC. Vendors must identify any additional components, products, licensing, or account requirements necessary to provide this capability.
• Support adaptive/risk-based multifactor authentication and phishing-resistant authentication using standards such as FIDO2/WebAuthn.
• Provide centralized directory services capable of synchronizing with the City’s on-premises Active Directory environment.
• Support attribute mapping and custom user profile schemas.
• Integrate with the City’s HR system of record to automate Joiner-Mover-Leaver processes, including provisioning, modification, and deprovisioning of access.
• Automatically disable access across connected applications when a termination event is received from the HR system.
• Support centralized management of multiple organizational domains within a single tenant while maintaining appropriate administrative, policy, and security separation.
• Support role-based and delegated administration.