3-Utah Tech iPaaS Matrix Questionnaire.xlsx
XLSX spreadsheet 23 KB Posted
- Solicitation number
- 26-0821
- Issued by
- Utah
About this file
This document is a Matrix Questionnaire for Utah Tech University's Integration Platform as a Service (iPaaS) procurement, which evaluates vendor responses against institutional requirements across multiple functional areas. Utah Tech University seeks a secure, cloud-based iPaaS solution to establish a modern enterprise integration framework supporting cloud, on-premises, and hybrid systems while reducing reliance on custom point-to-point integrations. The questionnaire addresses 124 minimum and supplementary requirements across ten categories: Platform & Access, Integration Development, APIs/Events/Messaging, Ellucian & Higher Education capabilities, Database Integration, File Integration, Scheduling & Orchestration, Monitoring/Administration/Governance, Security/Privacy/Compliance, Administration & Usability, Implementation/Training/Support, Pricing & Licensing, and Product Roadmap & Exit strategies. Vendors must indicate whether each requirement is implemented (Yes/No/Partial), included in base cost, and provide explanatory comments referencing proposal documentation.
The questionnaire emphasizes critical capabilities including SaaS delivery with high availability and disaster recovery, low-code integration development, support for Ellucian Banner and Ethos APIs, Oracle database connectivity with on-premises access, role-based access controls, comprehensive monitoring and audit logging, encryption standards, multifactor authentication, and FERPA compliance. Vendors must clearly identify all recurring and one-time costs, provide five-year total cost of ownership projections, and specify pricing variables including environments, users, agents, connections, and transaction volumes. The evaluation prioritizes security certifications (SOC 2 Type II, HECVAT, VPAT), data ownership contractual recognition, SCIM provisioning, and vendor commitment to knowledge transfer and post-go-live support. Specific gaps in vendor responses relate to Microsoft Entra ID SSO, data residency controls, API creation/publication capabilities, prebuilt Ellucian content, and advanced features such as change data capture and customer-managed encryption keys.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Matrix Questionnaire
| Minimum Requirement | Question Set | Subset | Question | Implemented (Y/N/Partial) | Included in base cost (Y/N) | Comments / Explanation |
| Yes | Platform & Access | SaaS Delivery | Solution is delivered as a vendor-supported cloud service. | |||
| Yes | Platform & Access | Hybrid Connectivity | Securely connects cloud services to University-hosted systems without requiring those systems to be publicly accessible. | |||
| Yes | Platform & Access | Microsoft Entra ID SSO | Supports single sign-on using Microsoft Entra ID. | |||
| No | Platform & Access | Role-Based Access | Supports role-based access control and separation of administrative, development, operational, and audit duties. | |||
| Yes | Platform & Access | Nonproduction and Production | Provides separate nonproduction and production environments, with support for development, testing, and staging functions. | |||
| Yes | Platform & Access | Promotion and Rollback | Supports controlled promotion, versioning, deployment history, and rollback of integrations between environments. | |||
| Yes | Platform & Access | High Availability | Provides high availability and published service-level commitments. | |||
| Yes | Platform & Access | Disaster Recovery | Provides documented backup, disaster-recovery, recovery-time, and recovery-point objectives. | |||
| Yes | Platform & Access | Accessibility | Administrative and user-facing interfaces conform to WCAG 2.1 Level AA or a later applicable Level AA standard. | |||
| No | Platform & Access | Data Residency | Allows Utah Tech to select or identify the geographic region where University data is stored and processed. | |||
| No | Platform & Access | Tenant Isolation | Provides documented logical or physical tenant-isolation controls. | |||
| No | Platform & Access | Automatic Scaling | Automatically scales processing capacity to accommodate changing workloads. | |||
| Yes | Platform & Access | Connections & Flows | Provides unlimited connections and flows, or clearly identifies scalable limits and any associated per-connection or per-flow licensing or charges. | |||
| Yes | Integration Development | Low-Code Designer | Provides a visual or low-code integration designer. | |||
| Yes | Integration Development | Reusable Components | Supports reusable components, templates, shared libraries, and shared connections. | |||
| Yes | Integration Development | Data Mapping | Supports data mapping, transformation, validation, branching, looping, lookup, and conditional processing. | |||
| Yes | Integration Development | Execution Methods | Supports scheduled, event-driven, webhook-triggered, and manually initiated processing. | |||
| Yes | Integration Development | Custom Code | Supports custom scripting or programming when low-code functionality is insufficient. | |||
| Yes | Integration Development | Environment Configuration | Supports parameters, environment variables, and environment-specific configuration without rebuilding integrations. | |||
| Yes | Integration Development | Testing and Debugging | Provides automated testing, validation, debugging, tracing, and test execution capabilities. | |||
| Yes | Integration Development | Source Control | Supports source control integration and version comparison for integration definitions. | |||
| Yes | Integration Development | CI/CD | Supports automated or controlled build, test, approval, promotion, and deployment pipelines. | |||
| Yes | Integration Development | Concurrent Execution Controls | Prevents overlapping job executions and supports restart, resume, or checkpoint processing where appropriate. | |||
| Yes | Integration Development | Exportability | Allows integration definitions, configuration, and related metadata to be exported in a documented, usable format. | |||
| No | Integration Development | Command-Line Tools | Provides supported command-line tools or SDKs for administration, deployment, and automation. | |||
| No | Integration Development | Human-Readable Export | Exports integration definitions and metadata in a human-readable format suitable for review and source control. | |||
| No | Integration Development | Mock Services | Provides mock services or API simulation for testing integrations without production dependencies. | |||
| Yes | APIs, Events & Messaging | REST APIs | Consumes and publishes REST APIs. | |||
| Yes | APIs, Events & Messaging | SOAP Services | Consumes and publishes SOAP web services. | |||
| Yes | APIs, Events & Messaging | JSON and XML | Processes JSON and XML payloads and schemas. | |||
| Yes | APIs, Events & Messaging | OAuth 2.0 | Supports OAuth 2.0, including secure token storage and renewal. | |||
| Yes | APIs, Events & Messaging | Authentication Methods | Supports OpenID Connect, API keys, bearer tokens, mutual TLS, and legacy authentication where required. | |||
| Yes | APIs, Events & Messaging | API Resilience | Handles pagination, rate limits, retries, timeouts, asynchronous processing, and transient failures. | |||
| Yes | APIs, Events & Messaging | Webhooks | Consumes and publishes webhooks. | |||
| Yes | APIs, Events & Messaging | Queues and Pub/Sub | Supports queues, publish/subscribe services, and event-driven processing. | |||
| Yes | APIs, Events & Messaging | Guaranteed Delivery | Supports durable delivery, duplicate prevention or idempotency, failed-message handling, and dead-letter processing. | |||
| Yes | APIs, Events & Messaging | API Creation and Publication | Creates, publishes, secures, documents, versions, throttles, and monitors APIs. | |||
| No | APIs, Events & Messaging | Developer Portal | Provides a developer portal or equivalent capability for API discovery, documentation, access requests, and testing. | |||
| No | APIs, Events & Messaging | API Lifecycle | Supports controlled API deprecation, retirement, and consumer notification. | |||
| No | APIs, Events & Messaging | Event Streaming | Supports event-streaming platforms and high-volume streaming use cases. | |||
| Yes | Ellucian & Higher Education | Ellucian Ethos APIs | Supports Ellucian Ethos APIs and authentication methods. | |||
| Yes | Ellucian & Higher Education | Ethos Proxy APIs | Supports Ellucian Ethos Proxy APIs. | |||
| Yes | Ellucian & Higher Education | Ethos Publish/Subscribe | Supports Ellucian Ethos publish/subscribe events. | |||
| Yes | Ellucian & Higher Education | Banner Business Process APIs | Supports Ellucian Banner Business Process APIs. | |||
| Yes | Ellucian & Higher Education | Other Banner APIs | Supports other Ellucian Banner administrative and business APIs through configurable API connections. | |||
| Yes | Ellucian & Higher Education | Banner Oracle Access | Supports secure Oracle database access when Banner APIs are unavailable or insufficient. | |||
| Yes | Ellucian & Higher Education | Higher Education Experience | Vendor has successful production iPaaS or enterprise integration implementations in higher education. | |||
| Yes | Ellucian & Higher Education | Banner/Ethos References | Vendor can provide current higher-education references using Banner, Ethos, Oracle, or comparable hybrid environments. | |||
| No | Ellucian & Higher Education | Prebuilt Ellucian Content | Provides prebuilt connectors, templates, or reusable components for Ellucian Banner or Ethos. | |||
| No | Ellucian & Higher Education | ApplicationEnhancer | Supports integration with ApplicationEnhancer through APIs, databases, or secure file transfer. | |||
| No | Ellucian & Higher Education | EAB Products | Supports integration with EAB products, including EAB Edify, through available integration methods. | |||
| No | Ellucian & Higher Education | UKG Ready | Provides connectors, templates, or demonstrated integration experience with UKG Ready. | |||
| No | Ellucian & Higher Education | Kuali Build | Provides demonstrated integration experience with Kuali Build APIs and webhooks. | |||
| Yes | Database Integration | Oracle Connectivity | Provides secure Oracle database connectivity. | |||
| Yes | Database Integration | On-Premises Database Access | Supports Oracle connectivity through secure agents, gateways, or runtimes installed within the University network. | |||
| Yes | Database Integration | Parameterized SQL | Supports parameterized SQL queries and protection against SQL injection. | |||
| Yes | Database Integration | Stored Procedures | Executes Oracle stored procedures and functions, including input and output parameters. | |||
| Yes | Database Integration | Transactions | Supports database transactions and rollback where technically feasible. | |||
| Yes | Database Integration | Bulk Operations | Supports bulk insert, update, delete, merge, and large-volume data operations. | |||
| Yes | Database Integration | Staging Tables | Supports staging-table, comparison, reconciliation, and add/update/deactivate processing patterns. | |||
| Yes | Database Integration | Connection Management | Supports encrypted connections, connection pooling, timeout controls, and secure credential management. | |||
| No | Database Integration | Incremental Extraction | Supports incremental extraction based on timestamps, keys, watermarks, or other change indicators. | |||
| No | Database Integration | Change Data Capture | Supports Oracle change data capture or equivalent near-real-time change processing. | |||
| No | Database Integration | Schema Discovery | Allows developers to browse database schemas, tables, columns, procedures, and metadata. | |||
| Yes | File Integration | SFTP | Supports secure SFTP retrieval and delivery. | |||
| Yes | File Integration | Managed File Transfer | Provides managed file-transfer capabilities with scheduling, monitoring, and delivery confirmation. | |||
| Yes | File Integration | File Formats | Processes CSV, delimited, fixed-width, JSON, XML, Excel, and compressed files. | |||
| Yes | File Integration | PGP Encryption | Supports PGP or equivalent file encryption and decryption. | |||
| Yes | File Integration | File Validation | Supports file naming rules, structural validation, content validation, and record-count verification. | |||
| Yes | File Integration | Duplicate Detection | Detects and prevents unintended duplicate-file processing. | |||
| Yes | File Integration | Retention and Cleanup | Supports configurable file retention, archival, and cleanup policies. | |||
| Yes | File Integration | Large Files | Supports large-file and large-record-count processing without requiring the entire file to be held in memory. | |||
| No | File Integration | Cloud Storage | Supports common cloud storage services in addition to SFTP and local or network file systems. | |||
| No | File Integration | Streaming File Processing | Supports streaming or chunked processing for very large files. | |||
| Yes | Scheduling & Orchestration | Time-Based Scheduling | Supports time-based, calendar-based, and recurring schedules. | |||
| Yes | Scheduling & Orchestration | Mountain Time | Supports Mountain Time and correctly handles daylight-saving time changes. | |||
| Yes | Scheduling & Orchestration | Dependencies | Supports dependency-based execution and parent/child workflow orchestration. | |||
| Yes | Scheduling & Orchestration | Blackout Periods | Supports blackout periods, maintenance windows, and schedule exceptions. | |||
| Yes | Scheduling & Orchestration | Manual Execution | Allows authorized users to manually start, stop, restart, or rerun integrations. | |||
| No | Scheduling & Orchestration | Prioritization | Supports job prioritization, queues, and workload controls. | |||
| No | Scheduling & Orchestration | Long-Running Processes | Supports long-running processes with durable state and resumability. | |||
| Yes | Monitoring, Administration & Governance | Central Dashboard | Provides centralized dashboards showing execution status, performance, and failures. | |||
| Yes | Monitoring, Administration & Governance | Searchable Logs | Provides searchable logs, detailed error messages, timestamps, duration, and record counts. | |||
| Yes | Monitoring, Administration & Governance | Failure Classification | Distinguishes system, authentication, network, source-system, target-system, validation, partial, and record-level failures. | |||
| Yes | Monitoring, Administration & Governance | Record-Level Reprocessing | Allows operators to correct and reprocess failed records without rerunning an entire integration where feasible. | |||
| Yes | Monitoring, Administration & Governance | Alerts | Provides configurable alerts through email, webhooks, or external monitoring tools. | |||
| Yes | Monitoring, Administration & Governance | Health Monitoring | Monitors agents, gateways, runtimes, connections, APIs, and other platform components. | |||
| Yes | Monitoring, Administration & Governance | Audit History | Provides administrative, deployment, configuration, access, and execution audit histories. | |||
| Yes | Monitoring, Administration & Governance | Deployment Approvals | Supports deployment approvals and separation of development, deployment, and production-support responsibilities. | |||
| Yes | Monitoring, Administration & Governance | Integration Inventory | Maintains an inventory or catalog of integrations, APIs, owners, technical contacts, and business contacts. | |||
| Yes | Monitoring, Administration & Governance | Documentation | Supports integration documentation, data mappings, business rules, dependencies, and operational procedures. | |||
| No | Monitoring, Administration & Governance | Lineage | Provides source-to-target data lineage and relationship visualization. | |||
| No | Monitoring, Administration & Governance | Impact Analysis | Identifies downstream dependencies and potential impacts before an integration or API is changed. | |||
| No | Monitoring, Administration & Governance | Retirement Status | Supports integration and API lifecycle status, including planned retirement and decommissioning. | |||
| Yes | Monitoring, Administration & Governance | Usage Reporting | Reports platform usage, consumption, storage, transaction counts, and licensing metrics. | |||
| No | Monitoring, Administration & Governance | External Monitoring Integration | Integrates with external monitoring, SIEM, log analytics, or incident-management platforms. | |||
| Yes | Security, Privacy & Compliance | HECVAT | Can the vendor provide a current HECVAT or equivalent higher-education security assessment if selected? | |||
| Yes | Security, Privacy & Compliance | SOC 2 | Can the vendor provide a current SOC 2 Type II report or equivalent independent security assessment if selected? | |||
| Yes | Security, Privacy & Compliance | VPAT | Can the vendor provide a current VPAT for the proposed solution that documents conformance with WCAG 2.1 Level AA or a later applicable Level AA standard if selected? | |||
| Yes | Security, Privacy & Compliance | FERPA | Solution and vendor practices support University compliance with FERPA and other applicable privacy requirements. | |||
| Yes | Security, Privacy & Compliance | Encryption | Encrypts University data in transit and at rest using current industry-standard protocols. | |||
| Yes | Security, Privacy & Compliance | Secrets Management | Provides secure storage, masking, rotation, and access control for passwords, keys, certificates, and tokens. | |||
| Yes | Security, Privacy & Compliance | MFA and Access Controls | Supports multifactor authentication, least privilege, session controls, and immediate access revocation. | |||
| Yes | Security, Privacy & Compliance | Security Audit Logs | Provides tamper-resistant security and administrative audit logs with configurable retention. | |||
| Yes | Security, Privacy & Compliance | Vulnerability Management | Maintains documented vulnerability management, patching, penetration testing, and secure-development practices. | |||
| Yes | Security, Privacy & Compliance | Incident Response | Maintains documented incident response and breach-notification procedures and timelines. | |||
| Yes | Security, Privacy & Compliance | Data Retention and Deletion | Supports configurable retention and secure deletion of University data, logs, backups, and metadata. | |||
| Yes | Security, Privacy & Compliance | Data Ownership | Contractually recognizes Utah Tech University ownership of University data and institution-specific integration logic. | |||
| Yes | Security, Privacy & Compliance | Subprocessors | Discloses hosting locations, processing locations, subprocessors, and third-party service dependencies. | |||
| Yes | Security, Privacy & Compliance | Vendor Support Access | Vendor support access is approved, time-limited, least-privileged, logged, reviewed, and revoked when no longer needed. | |||
| Yes | Security, Privacy & Compliance | AI Data Use | University data, configurations, logs, code, and metadata are not used to train generally available AI models without express written authorization. | |||
| No | Security, Privacy & Compliance | ISO 27001 | Vendor maintains ISO 27001 certification or equivalent information-security certification. | |||
| No | Security, Privacy & Compliance | Customer-Managed Keys | Supports customer-managed encryption keys or equivalent advanced key-management options. | |||
| No | Security, Privacy & Compliance | SCIM Provisioning | Supports SCIM or equivalent automated user and group provisioning. | |||
| Yes | Administration & Usability | Role-Specific Experience | Provides appropriate interfaces and permissions for administrators, developers, operators, auditors, and read-only users. | |||
| Yes | Administration & Usability | Search and Navigation | Allows users to quickly locate integrations, APIs, connections, logs, deployments, and documentation. | |||
| Yes | Administration & Usability | Version Comparison | Allows users to compare integration versions, configurations, and environment differences. | |||
| Yes | Administration & Usability | Connection Administration | Allows authorized staff to manage connections, credentials, certificates, and environment-specific settings. | |||
| Yes | Administration & Usability | Troubleshooting | Provides clear tools for tracing execution, viewing payloads safely, diagnosing failures, and identifying root cause. | |||
| No | Administration & Usability | Custom Dashboards | Allows administrators and operators to create role-specific dashboards and reports. | |||
| No | Administration & Usability | Bulk Administration | Supports bulk changes, bulk deployment, and bulk administration across integrations or environments. | |||
| Yes | Implementation, Training & Support | Implementation Planning | Includes architecture, security, connectivity, environment, and implementation planning. | |||
| Yes | Implementation, Training & Support | Initial Integrations | Includes implementation, testing, deployment, documentation, and knowledge transfer for the agreed-upon initial integrations. | |||
| Yes | Implementation, Training & Support | Migration Planning | Includes assessment and migration planning for selected scripts, database feeds, APIs, and file transfers. | |||
| Yes | Implementation, Training & Support | Change Management | Includes change-management and adoption support for establishing an enterprise integration program. | |||
| Yes | Implementation, Training & Support | Role-Based Training | Provides hands-on training for platform administrators, integration developers, security administrators, and operational support staff. | |||
| Yes | Implementation, Training & Support | Knowledge Transfer | Provides practical knowledge transfer so Utah Tech staff can independently build, deploy, and support routine integrations. | |||
| Yes | Implementation, Training & Support | Editable Documentation | Provides editable architecture documents, mappings, runbooks, standards, deployment procedures, and support documentation. | |||
| Yes | Implementation, Training & Support | Ongoing Support | Provides ongoing technical support throughout the contract term. | |||
| Yes | Implementation, Training & Support | Support SLAs | Provides documented severity levels, support hours, response targets, escalation paths, and service-level remedies. | |||
| No | Implementation, Training & Support | Named Customer Success | Provides a named customer-success manager or equivalent ongoing relationship resource. | |||
| No | Implementation, Training & Support | Certification Program | Offers formal training, certification, or structured learning paths for University staff. | |||
| No | Implementation, Training & Support | Post-Go-Live Support | Includes an enhanced post-go-live stabilization period with direct access to implementation specialists. | |||
| Yes | Pricing & Licensing | Transparent Pricing | Clearly identifies all recurring and one-time costs, required modules, connectors, services, and third-party dependencies. | |||
| Yes | Pricing & Licensing | Five-Year TCO | Provides annual pricing for each proposed contract year and a five-year total cost of ownership. | |||
| Yes | Pricing & Licensing | Pricing Metrics | Identifies all pricing variables, including environments, users, agents, connections, connectors, API calls, transactions, data volume, compute, storage, and log retention. | |||
| Yes | Pricing & Licensing | Base-Cost Inclusion | Clearly identifies whether each matrix requirement is included in the proposed base cost. | |||
| Yes | Pricing & Licensing | Renewal Terms | Provides renewal pricing, maximum annual increases, and any minimum commitment requirements. | |||
| No | Pricing & Licensing | Predictable Consumption | Provides alerts, limits, forecasting, and reporting to prevent unexpected consumption or overage charges. | |||
| No | Pricing & Licensing | Nonproduction Pricing | Includes sufficient nonproduction capacity without substantial additional licensing charges. | |||
| Yes | Product Roadmap & Exit | Release Management | Provides release schedules, maintenance notices, backward-compatibility policies, and advance notice of potentially disruptive changes. | |||
| Yes | Product Roadmap & Exit | Deprecation Policy | Provides documented connector, feature, and API deprecation policies with reasonable transition periods. | |||
| Yes | Product Roadmap & Exit | Data Export at Termination | Allows export of integration definitions, configurations, API definitions, documentation, logs, and operational metadata at contract termination. | |||
| Yes | Product Roadmap & Exit | Data Destruction | Provides written certification of University data destruction following termination and the agreed transition period. | |||
| No | Product Roadmap & Exit | Product Roadmap | Provides a two-year roadmap for platform, connector, higher-education, Ellucian, and AI capabilities. | |||
| No | Product Roadmap & Exit | Transition Assistance | Provides reasonably priced transition assistance and continued platform access during an agreed transition period. |
Instructions
| Utah Tech University iPaaS Matrix Questionnaire | |
| Field | Instructions |
| Minimum Requirement | Rows marked Yes are minimum requirements. Failure to satisfy a minimum requirement may affect responsiveness or eligibility. |
| Implemented | Select Y, N, or Partial. Use Comments / Explanation to describe limitations, configuration, custom development, roadmap status, or third-party dependencies. |
| Included in base cost | Select Y or N. Any required additional module, connector, environment, service, or consumption charge must be explained. |
| Comments / Explanation | Provide concise details and reference the applicable proposal page, product documentation, or pricing item when useful. |
| Supporting Material | Requested screenshots and supporting documents should be from the proposed product, edition, and licensing configuration. |
File details come from the government source that posted it. Updated .