JOFOC_SAM.pdf

NATIONAL TRANSPORTATION SAFETY BOARD

Justification for Other Than Full and Open Competition

“Okta Identity Cloud Software & Maintenance”

Okta Software & Maintenance, Justification for Other than Full and Open Competition

1. Program Office / Procurement Request:

Office of the Chief Information Officer (CIO), Computer Service Division (CIO-10)

2. Nature of Action:

The purpose of this Justification for Other Than Full and Open Competition (JOFOC) is to document the agency’s rationale for acquiring brand-name only Okta Identity Cloud Software and Maintenance. This justification applies solely to the portion of the acquisition that requires the specific brand-name product and does not limit competition for other components of the overall requirement that may be fulfilled through full and open competition.

3. Description of Requirement:

The National Transportation Safety Board (NTSB) has implemented a range of cloud services, data centers, and externally hosted infrastructure platforms that require a unified, cloud-based digital identity solution to ensure operational efficiency, security, and effective identity management. In accordance with the Federal Information Security Management Act (FISMA) and related federal cybersecurity directives, the agency must enforce Personal Identity Verification (PIV)-based authentication for both internal and external IT systems. At present, NTSB lacks a fully cloud-native identity federation service that can reliably support PIV login for externally hosted platforms. This gap presents an escalating security and operational risk as the agency expands its reliance on cloud services and remote infrastructure. A modern cloud-based identity solution is essential to reduce dependency on the agency’s physical network infrastructure, improve resilience, and streamline operational workloads.

To address these challenges, the Chief Information Officer (CIO) proposes the acquisition of Okta Identity Cloud, a FedRAMP-authorized, 100% cloud-native identity and access management platform. Okta is uniquely capable of providing secure and compliant PIV-based authentication across both cloud and on-premises environments. By consolidating identity management into a single, scalable platform, NTSB will be able to reduce operations and maintenance costs, achieve compliance with FISMA and PIV mandates, and mitigate existing vulnerabilities through advanced multi-factor authentication (MFA) features. The deployment of Okta will also facilitate the implementation of a zero-trust security architecture, directly supporting the agency’s long-term cloud adoption strategy while ensuring the protection of sensitive federal data and systems.

The following items will be procured:

SERVICE Part # Qty

1. IT Products – Lifecycle Management, 1 OIN App, Annual Okta G024 664

2. IT Products – MFA, Annual Okta G131 664

3. IT Products - Single Sign-On (5 app limit), Annual Okta G054 664

4. IT Products – Universal Directory, Annual Okta G055 664

5. Cell Add-On Regulated Moderate Cloud G577 1

6. Okta – Premier Success Plan - Silver G1048 1

4. Authority Cited:

FAR 13.106-1(b)(1)(ii). Where a single source is identified to provide a portion of a purchase because that portion of the purchase specifies a particular brand-name item, the documentation in paragraph (b)(1)(i) of this section only applies to the portion of the purchase requiring the brand-name item. The documentation should state it is covering only the portion of the acquisition which is brand-name.

5. Unique Qualifications / Circumstances of Requirement:

Okta is the only purely cloud-based identity service that is FedRAMP-authorized and FIPS 140-2 certified for MFA, meeting the highest federal security standards. It is also the only federated identity management solution authorized under FedRAMP that has been certified by Zscaler to integrate with the Zscaler Security Cloud— ensuring secure, seamless access across both platforms.

6. Efforts to Determine Only One Source:

In accordance with FAR 5.101(a)(1), this Justification for Other Than Full and Open Competition (JOFOC), along with all supporting documentation, shall be posted electronically to the Contracting Opportunities page on the System for Award Management (SAM) website (www.sam.gov) to promote transparency and provide an opportunity for interested parties to respond. The supporting documentation will include a statement that all responsible sources may submit a capability statement, proposal, or quotation, which shall be considered by the agency. This public notice ensures that potential offerors are informed of the agency’s intent and are afforded a fair opportunity to demonstrate their ability to meet the requirement.

http://www.sam.gov/

7. Contracting Officer’s Determination:

I have reviewed the above JOFOC, and determined that based on the information provided, it is accurate and complete, the anticipated cost of any subsequent award would be in the best interest and fair and reasonable to the Government.

8. Market Research:

Okta representatives have informed the NTSB that there are multiple resellers of Okta Identity Cloud Software & Maintenance that work through Carahsoft.

9. Other Pertinent Information:

Carahsoft is the sole GSA contract holder for Okta products and serves as Okta’s authorized distributor. Okta permits certain value-added resellers (VARs) to reference its products under Carahsoft’s GSA schedule through formal Contract Teaming Agreements (CTAs). Carahsoft has indicated that it does not intend to compete directly with its resellers and, accordingly, did not respond to the Request for Quotation (RFQ). The RFQ was issued via GSA eBuy on September 5, 2025, and three vendors submitted quotations. Some of the responding resellers attempted to offer Okta products by referencing Carahsoft’s GSA contract; however, they did not hold the Okta products on their own GSA schedules. Other quoters provided open market pricing. In accordance with GSA ordering procedures, the NTSB cannot issue a delivery order under a GSA Schedule if the quoted products are not listed on the vendor’s own contract. As a result, the agency is unable to make an award under the original RFQ and must resolicit the requirement as an open market procurement.

10. List of Interested Parties:

Three vendors—Softthink Solutions, Inc., Blackwood Associates, Inc., and Vinsys Information Technology, Inc.—expressed interest and submitted quotations in response to the initial RFQ issued via GSA eBuy.

11. Efforts to Remove Barriers to Competition:

NTSB will continue to monitor the market for future acquisitions to identify new or improved products that meet or exceed requirements and that can be considered for competition.

12. Contracting Officer’s Certification The Contracting Officer certifies that this JOFOC is accurate and complete.