A16_JOFOC_CyberSafe_TrustBroker_signed_(Redacted)_1.pdf
PDF 474 KB Posted
- Attached to
- JOFOC CyberSafe TrustBroker (Redacted) Federal contract opportunity
- Solicitation number
- 140D0425Q0188
About this file
This is a Single Source Determination using Simplified Acquisition Procedures (SAP) for the Department of the Interior (DOI) Interior Business Center's procurement of CyberSafe TrustBroker licenses and maintenance support. The document justifies sole-source procurement from Bull Horn Technologies, the only U.S. reseller for CyberSafe (a UK-based company), to provide Single Sign-On (SSO) functionality for DOI's SAP Business Warehouse Modeling/Eclipse integrated development environment tool.
The contract has a delivery/award date of March 10, 2025, with a base year plus 4 option years. The procurement is necessary because DOI's current SSO solution, CyberArk, is not SAP-compatible or FedRAMP certified and has performance issues. CyberSafe TrustBroker was selected after successful prototype testing (August-October 2024) as the only solution that can provide smart card authentication for SAP GUI logon without requiring additional infrastructure. Other solutions like SAP SSO 3.0 and SAP Secure Login Service were evaluated but rejected due to download unavailability and unclear FedRAMP certification status. Bull Horn Technologies provided a quote for 100 users, including perpetual TrustBroker Product Bundle licenses and annual maintenance and support for the base year and option years.
View the file
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
140D0424Q0188
3. Identification of the single source to be solicited.
DOI cannot purchase directly through CyberSafe since they are a UK based company.
CyberSafe identified the below vendor as their sole U.S. reseller in an email dated 2/11/2025.
Bull Horn Technologies 26389 Linton Pasture Place Centreville, VA 20120 POC: Mohith Narayanan C: (301) 758-6377 O: (703)219-8077 Email: mnarayanan@bullhorntechnologies.com
4. Reason for authority cited. The contracting officer has determined the circumstances of the contract deem only one source reasonably available.
Brand Name – The particular brand name is essential to the requirement and market research indicates similar products do not meet or cannot be modified to meet agency needs. If the justification is to cover only the portion of the buy which is brand name, then it should so state; the approval level requirements will then only apply to that portion.
5. Rationale.
Multi-Factor Authentication (MFA) is a mandated activity required by various Federal laws and authorities and is key component in the overall system health of any enterprise system. DOI requires Single-Sign-On (SSO) options for SAP BW Modelling/Eclipse integrated development environment (IDE) tool. Presently, the Cybersafe TrustBroker product is the only product that can provide this functionality using DOI’s smart cards.
SAP and other vendor's SSO products do not include functionality for using smart cards during SAP GUI logon as required by DOI, unless additional infrastructure is implemented, thereby significantly increasing the implementation costs and complexity.
The TrustBroker product can be implemented very easily and without any additional infrastructure and offers more flexibility to meet the requirements of DOI, both now and in the future.
The BIO initially explored two SAP single sign-on (SSO) solutions: the first was on-premise SAP SSO 3.0 and the second was a cloud-based SAP Secure Login Service (SLS) on the Business Transformation Platform. The BIO was unable to perform prototype testing of the SAP SSO 3.0 due to download unavailability. The BIO made multiple requests for the SAP SSO 3.0 software download and followed-up for several weeks. Furthermore, SAP was no longer actively developing or enhancing the SAP SSO 3.0 product. The Government’s market research of the SAP SLS was hampered by SAP's inability to confirm its Federal Risk and Authorization Management Program
File details come from the government source that posted it. Updated .