ESIM Software Licenses Services SOO RFI Final.docx

Office of the Chief Information Officer Infrastructure Operations

STATEMENT OF OBJECTIVE (SOO)

(PING ESIM Identity Contract)

Date:

1. Introduction:

The Office of the Chief Information Officer (OCIO) for the Department of the Treasury Departmental Offices (DO) has identified a requirement to purchase software and services for the Enterprise Systems and Identity Management (ESIM) Logical Access Controlls (LACs) program.

ESIM LACs provides Treasury-wide capabilities including access controls for local, remote, and mobile devices, including Derived PIV credential infrastructure and issuance; Single Sign-On (SSO); Federation; Enterprise Idenditity Management; and PKI solutions.

2. Objective:

Treasury is seeking to create a contract vehicle to procure and renew existing PING, CyberArk, SailPoint and Radiant Logic Identity Management software licenses and services in support of the Department’s ESIM efforts.

PING Identity is an identity and access management (IAM) platform that enables secure authentication, single-sign-on (SSO), multi-factor authentication (MFA) and identity governance for users, applications and APIs.

CyberArk is an Identity Security platform focused on protecting privileged accounts, credentials, and access to critical systems. Its primary purpose is to reduce the risk of cyberattacks by securing high-value identities and controlling privileged access.

SailPoint is an Identity Security and Identity Governance & Administration (IGA) platform that helps organizations manage the entire lifecycle of user identities and their access to applications, systems, and data. Its primary goal is to ensure that the right people have the right access to the right resources at the right time.

Radiant Logic is an Identity Data Platform that helps organizations unify identity information from multiple systems into a single, trusted source for Identity and Access Management Only Authorized resellers of PING, CyberArk, SailPoint and Radiant Logic Identity Licenses are required. PING, CyberArk, SailPoint and Radiant Logic Identity software licenses must be compliant with the Trade Agreements Act (TAA).

3. Product:

The vendor shall provide products as configured below with associated Software licenses.

Base Year

Subscription-based Software - Includes unlimited production and non-production servers - Includes support - Entitled to download PingDataSyncServer - Entitled to download PingDataProxy Ping Identity Corporation - DIR-DS-CS-I-S Start Date: 12/23/2026 End Date: 12/22/2027 7,000,000

Subscription-based Software - Includes unlimited production and non-production servers - Includes support - Entitled to download PingDataSyncServer - Entitled to download PingDataProxy Ping Identity Corporation - DIR-DS-PR-I-S Start Date: 12/23/2026 End Date: 12/22/2027 1,500,000

Software - For use with Workforce Identities only - Includes unlimited production and non-production servers - Includes support Ping Identity Corporation - SSO-PF-WF-I-S Start Date: 12/23/2026 End Date: 12/22/2027 25,000

Subscription-based Software - Includes unlimited production and non-production servers - Includes support - Entitled to download PingDataSyncServer - Entitled to download PingDataProxy Ping Identity Corporation - DIR-DS-WF-I-S Start Date: 12/23/2026 End Date: 12/22/2027 25,000

Elite Customer Care Package as further described in the Support Policy. Includes a Technical Account Manager (TAM) as defined in the attached exhibit.

-Subscription-based Software -For use with Workforce Identities via 3rd party platform only Start Date: 12/08/2026 End Date: 12/07/2027 125,000

-Subscription-based Software -For use with Workforce Identities via 3rd party platform only Start Date: 12/08/2026 End Date: 12/07/2027 125,000

-Subscription-based Software -For use with Workforce Identities via 3rd party platform only Start Date: 12/08/2026 End Date: 12/07/2027 125,000

PingFederate - Single Sign-On

- Subscription-based Software

- For use with Customer Identities only

- Includes unlimited production and non-production servers Start Date: 12/08/2026 End Date: 12/07/2027 75,000,000

PingAccess - Access Security

- Subscription-based Software

- For use with Customer Identities only

- Includes unlimited production and non-production servers Start Date: 12/08/2026 End Date: 12/07/2027 75,000,000

Identities PingDirectory - Directory & Data Store

- Subscription-based Software

- Includes unlimited production and non-production servers

- Entitled to download PingDataSyncServer

- Entitled to download PingDataProxy Start Date: 12/08/2026 End Date: 12/07/2027 75,000,000

Elite Customer Care Package as further described in the Support Policy. Includes a Technical Account Manager (TAM) as defined in the attached exhibit.

Start Date: 12/08/2026 End Date: 12/07/2027

On-going support for a Professional Services Integration Kit. Engagement scope described in the attached exhibit. Support will conclude by the end of term dates indicated. Subject to the Terms & Conditions below.

Start Date: 12/08/2026 End Date: 12/07/2027

Top tier training subscription. Includes public instructor-led training.

Start Date: 12/08/2026 End Date: 12/07/2027

with Hosting Level:Managed Size:Large UberEther, Inc. - 60133 Start Date: 12/23/2026 End Date: 12/22/2027

Environment Small Non Prod Size: Small UberEther, Inc. - 51000 Start Date: 12/23/2026 End Date: 12/22/2027

Premium Customer Care Package as further described in the Support Policy.

Start Date: 9/30/2026 End Date: 9/29/2027

Core OpenIDM priced per internal users Start Date: 9/30/2026 End Date: 9/29/2027 1,100

Self-Service Module Internal Start Date: 9/30/2026 End Date: 9/29/2027 1,100

Identity Workflow Module Internal Start Date: 9/30/2026 End Date: 9/29/2027 1,100

- Workforce Identities Lifecycle & Relationship Management Upgrade Internal Start Date: 9/30/2026 End Date: 9/29/2027 1,100

PingGateway Edge Security - Subscription-based Software - For use with Workforce Identities Only - Includes unlimited production and non-production servers Start Date: 9/30/2026 End Date: 9/29/2027 1,100

Authorization Module Internal Start Date: 9/30/2026 End Date: 9/29/2027 1,100

Federation Module Internal Start Date: 9/30/2026 End Date: 9/29/2027 1,100

PingAM Intelligent Access - Subscription-based Software - For use with Customer Identities Only - Includes unlimited production and non-production servers Start Date: 9/30/2026 End Date: 9/29/2027 12,900

Identities PingDS Directory Server with Proxy

- Subscription-based Software

- For use with Workforce Identities Only

- Includes unlimited production and non-production servers Start Date: 9/30/2026 End Date: 9/29/2027 1,100

Identities Core OpenIDM priced per external users Start Date: 9/30/2026 End Date: 9/29/2027 12,900

Self-Service Module External Start Date: 9/30/2026 End Date: 9/29/2027 12,900

Identity Workflow Module External Start Date: 9/30/2026 End Date: 9/29/2027 12,900

Lifecycle & Relationship Management Upgrade External Start Date: 9/30/2026 End Date: 9/29/2027 12,900

PingGateway Edge Security - Subscription-based Software - For use with Customer Identities Only - Includes unlimited production and non-production servers Start Date: 9/30/2026 End Date: 9/29/2027 12,900

Authorization Module External Start Date: 9/30/2026 End Date: 9/29/2027 12,900

Federation Module External Start Date: 9/30/2026 End Date: 9/29/2027 12,900

PingAM Intelligent Access - Subscription-based Software - For use with Workforce Identities Only - Includes unlimited production and non-production servers Start Date: 9/30/2026 End Date: 9/29/2027 1,100

Identities PingDS Directory Server with Proxy

- Subscription-based Software

- For use with Customer Identities Only

- Includes unlimited production and non-production servers Start Date: 9/30/2026 End Date: 9/29/2027 12,900

Identity Synchronization Module - Business Partner Start Date: 9/30/2026 End Date: 9/29/2027 62,100

Self-Service Module - Business Partner Start Date: 9/30/2026 End Date: 9/29/2027 62,100

Identity Workflow Module - Business Partner Start Date: 9/30/2026 End Date: 9/29/2027 62,100

Authorizations Start Date: 9/30/2026 End Date: 9/29/2027 62,100

Federation Module Business Partner Start Date: 9/30/2026 End Date: 9/29/2027 62,100

- Partner Identities Lifecycle & Relationship Management - Business Partner Start Date: 9/30/2026 End Date: 9/29/2027 62,100

Seamless, Context Based Authentication and User Self Service Journeys Start Date: 9/30/2026 End Date: 9/29/2027 62,100

Edge Security Identity Gateway Business Partner Start Date: 9/30/2026 End Date: 9/29/2027 62,100

PingDS Directory Server with Proxy

- Subscription-based Software

- For use with Partner Identities Only

- Includes unlimited production and non-production servers Start Date: 9/30/2026 End Date: 9/29/2027 62,100

Edge Security Identity Gateway External Start Date: 9/30/2026 End Date: 9/29/2027 434,000

Include: PAS-USER-PERP (QTY 350), APP-ISV-PERP (QTY 4), PoP: 03/31/26 - 03/30/27

Include: APP-AGNT-PERP (QTY 50), PoP: 03/31/26 - 03/30/27

Include: APP-DYN-SYS-PERP (QTY 2), PAS-INF-CPM-PERP (QTY 5), PoP: 03/31/26 - 03/30/27

Include: APP-AGNT-PERP (QTY 20), PAS-USER-PERP (QTY 200), PoP: 03/31/26 - 03/30/27

Include: PAS-USER-PERP (QTY 50), PoP: 03/31/26 - 03/30/27

Include: PAS-USER-PERP (QTY 50), PoP: 03/31/26 - 03/30/27

APP-AGNT-PERP (QTY 500), APP-DYN-PROV-REGION-PERP (QTY 3), PAS-USER-PERP (QTY 4,000), PoP: 03/31/26 - 03/30/27

Include: APP-AGNT-PERP (QTY 1,000), PoP: 03/31/26 - 03/30/27

Include: APP-AGNT-PERP (QTY 2), PAS-USER-PERP (QTY 500), PoP: 03/31/26 - 03/30/27

Include: APP-AGNT-PERP (QTY 200), APP-DYN-SYS-PERP (QTY 2), PoP: 03/31/26 - 03/30/27

Security BusinessPlus Cloud - Price per Internal Identity Cube;

Annual Term, PoP: 12/31/2025 - 12/30/2026 125,000

Security BusinessPlus Cloud - Price per Lite User Identity Cube;

Annual Term, PoP: 12/31/2025 - 12/30/2026

PoP: 12/31/2025 - 12/30/2026 125,000

PoP: 12/31/2025 - 12/30/2026 1,000

of Purchase Price Annual of the SAAS-IDSEC-BIZ sku that will be required to be supported in a FedRAMP enviro, PoP: 12/31/2025 - 12/30/2026

Price per Identity, PoP: 12/31/2025 - 12/30/2026 3,000

PoP: 12/31/2025 - 12/30/2026

PoP: 12/31/2025 - 12/30/2026

4. Technology Refresh / Successor Offerings The Government may acquire updated versions, successor products, enhanced functionalities, new releases, or replacement offerings of products and services awarded under this BPA, provided such offerings are within the general scope, intent, and functional category of the original award. This includes commercially available upgrades, platform enhancements, subscription model changes, renamed products, bundled offerings, and newly released capabilities that evolve from or replace the original manufacturer offerings during the period of performance.

The BPA is intended to serve as the Treasury’s access vehicle for Ping’s, CyberArk’s and SailPoint’s full portfolio of current and future commercially available offerings within the scope of the parent contract, including successor technologies, evolving capabilities, newly introduced products and services, and revised licensing or consumption models made available during the period of performance. Such offerings may be incorporated into the BPA through administrative update, catalog refresh, or modification, as applicable, and shall remain subject to the terms and conditions of the BPA.

5. Technical Support:

The vendor shall provide support for services as prescribed in the agreements of the product.

6. Contract Type for this Order:

The Government anticipates that this task will result in a “Firm Fixed Price” (FFP) award.

7. Period of Performance:

Period of Performance: Base Year + 4 Options

8. Inspection and Acceptance:

The Delivery POC (TBD) is responsible for inspection and acceptance of all services.

9. Acceptance Criteria:

Certification by the Government of satisfactory goods or services provided is contingent upon the vendor performing in accordance with the terms and conditions of the referenced agreement, this order, and all amendments.

10. Invoice Review:

The Delivery POC may reject or require correction of any deficiencies found in the invoice or receiving report. In the event of a rejected invoice or receiving report, the Contractor must be notified in writing by the Delivery POC of the specific reasons for rejection.

11. Delivery Address:

POC: Will be responsible for receipt of product and invoice approval.

· The items are to be delivered to the following address below:

US Department of the Treasury

TBD

Additional information:

TBD

12. Shipping:

The vendor shall make use of commercial best practices in the packing and shipment of packages, unless otherwise stated in this order.

13. Other Special Considerations:

This procurement is required to have an item column placed into the Purchase Order (PO), this will match the same item # as the Purchase Request (PR) # on the contract. This action is critical in controlling the status and simplifying the effort to account for our items, for various reasons. This effort has proven to be a great asset to all stakeholders.

Special Instructions to Vendors & Shippers see example below for shipping requirement when preparing shipment cargo.

Example:

Department of Treasury/Operations Data Center Attn: Last name, First name Street Address City, State, Zip Code

14. Government Points of Contact: TBD

Procurement Sensitive Unclassified Page 7 of 7 image1.png