36C77619Q0180-001.docx

Statement of Work Department of Veterans Affairs Veterans Health Administration VA Library Network

HIG SST Identity Authentication & Access Management (IAAM) System Subscription

July 2019

A. GENERAL INFORMATION

1. INTRODUCTION

The Department of Veterans Affairs (VA), Veterans Health Administration (VHA), VA Library Network (VALNET) requires an existing, commercial, off-the-shelf, web-based, user identity authentication and access management system which will enable users to access online resources that the VA has subscribed to. The system shall manage both (1) access to online resources, and (2) user authentication and access, and include individually personalized and mobile optimized user portals. The system shall restrict resource access based on location/department/need (regardless of shared IP addresses) and will be made available to users throughout the VA.

2. OBJECTIVES

The goals of the VA for an identity authentication and access management system for electronic resources are as follows:

a. Providing nationwide access to an authentication system for electronic resources that exists at beginning of the subscription and throughout the period of performance of the subscription.

b. Promoting usage of online library resources and other VALNET services.

c. Providing identity and access control options to a varied number of account managers.

3. SCOPE OF WORK

The contractor shall:

a. Supply a combined method that will make available both (1) access to online resources and (2) user authentication and access to these resources.

b. Provide a system that includes individually personalized and mobile optimized user portals.

c. Supply a system which restricts resource access based on location/department/need (regardless of share IP addresses).

d. Supply and maintain a web-based method of establishing self-registration accounts for VA staff.

e. Provide a system with Internet Protocol (IP) authentication with an option not to use this method as requested by one or more individual VA medical centers (VAMCs).

f. Provide a system that supports Single Sign-On (SSO), ensuring that access can securely and efficiently be provided to VA staff with on-and-off-site access to electronic resources.

g. Provide a system with customized self-registration pages which allow users to self-register at their convenience.

h. Supply a system where individual users can be manually added, edited and removed by the administrators of the accounts, including the ability to set expiration dates for user accounts.

i. Provide a system which organizes user groups and allocates resource access at the individual or group level.

j. Provide a system where user groups can be based on a wide range of variables, including role, department and location.

k. Supply a system which can utilize a link resolver resource, such as Serials Solutions.

l. Provide expansive usage statistics on request to any account manager/administrator.

m. Supply a system which accommodates approximately 130 VAMC accounts, with the capacity to accommodate/add more accounts; up to 152.

n. Provide a system which accommodate approximately 20,000 personal accounts, with the capacity to accommodate/add more accounts.

o. Supply a system which functions independently from the VA computer network and requires no software to be loaded/uploaded to the VA computer network.

4. PERIOD OF PERFORMANCE

One (1) year, plus four (4), one (1) year option periods, to be exercised at the discretion of the Government.

5. ACCESS, CONTENT, AND SUPPORT

The contractor shall assure:

a. The system is 508 compliant (http://www.section508.gov/). If the system is not 508 compliant, the contractor shall describe measures being taken to bring the system into compliance and date, within 12 months of contract award, that the system will be 508 compliant. Or, if the system is not 508 compliant, the contractor shall describe why no work is being done to make it 508 compliant.

b. The system is accessible via a variety of personal mobile devices including Apple and Android devices.

c. System downtime is minimal, and the VA project manager is notified when such occurs.

d. All site content and support of the system is the responsibility of the contractor.

e. Customer service is available 24/7/365 via toll free number.

f. Onsite and telephonic instruction and training materials are available and designed to integrate solutions with maximum efficiency and effectiveness into the VA environment.

B. PRICE/DELIVERY SCHEDULE:

Base Period of Performance: TBD.

Option Year Four (4) of Four (4): TBD.

Total