JOFOC_SAM.pdf

NATIONAL TRANSPORTATION SAFETY BOARD

Justification for Other Than Full and Open Competition

“Okta Identity Cloud Software & Maintenance”

Okta Software & Maintenance, Justification for Other than Full and Open Competition

1. Program Office / Procurement Request:

Office of the Chief Information Officer (CIO), Computer Service Division (CIO-10) Purchase Request (PR): PUR260172

2. Nature of Action:

The purpose of this Justification for Other Than Full and Open Competition (JOFOC) is to document the agency’s rationale for acquiring brand-name only Okta Identity Cloud Software and Maintenance. This justification applies solely to the portion of the acquisition that requires the specific brand-name product and does not limit competition for other components of the overall requirement that may be fulfilled through full and open competition.

3. Description of Requirement:

The National Transportation Safety Board (NTSB) utilizes a combination of cloud services, data centers, and externally hosted infrastructure platforms that require a unified, cloud-based digital identity solution to support secure authentication, operational efficiency, and effective identity and access management. In accordance with the Federal Information Security Modernization Act (FISMA) and applicable Federal cybersecurity requirements and directives, NTSB must implement appropriate authentication and access controls, including Personal Identity Verification (PIV)-based authentication for applicable internal and external information systems.

NTSB currently utilizes a fully cloud-native identity federation service to support secure PIV authentication for externally hosted platforms. Continued access to this service is necessary to maintain existing authentication capabilities and avoid disruption to the agency’s operations and security posture. Failure to renew the software would create operational and security risks as NTSB continues to expand its use of cloud services and remotely hosted infrastructure. A cloud-based identity and access management solution reduces reliance on agency physical network infrastructure, improves system resilience, and supports efficient management of user identities and authentication across multiple environments.

To address these requirements, the Chief Information Officer (CIO) proposes the renewal of Okta Identity Cloud, a FedRAMP-authorized, cloud-based identity and access management platform currently supporting NTSB’s identity federation and authentication requirements. The continued use of Okta will provide NTSB with a centralized platform for identity management and secure authentication across cloud and on-premises environments, including support for PIV-based authentication and multi-factor authentication (MFA).

Renewal of the existing service will maintain continuity of NTSB’s current identity and authentication infrastructure while supporting the agency’s ongoing cloud adoption and cybersecurity objectives. The solution will also support the agency’s efforts to implement a zero-trust security architecture, strengthen access controls, reduce reliance on physical network infrastructure, and protect sensitive Federal information and systems. Continued use of the existing platform is expected to minimize operational disruption and avoid the costs and risks associated with transitioning to a different identity management solution.

The following items will be procured:

SERVICE Part # Qty

1. IT Products - Lifecycle Management, 1 OIN App, Users per Month

P000024 664

2. IT Products - MFA, Users per Month P000131 664

3. IT Products - Single Sign-On (5 app limit), Users per Month P000054 664

4. IT Products - Universal Directory, Users per Month P000055 664

5. Cell Add-On - Okta for Government Moderate P000577 1

6. Okta - Premier Success Plan - Silver P001048 1

4. Authority Cited:

FAR 13.106-1(b)(1)(ii). Where a single source is identified to provide a portion of a purchase because that portion of the purchase specifies a particular brand-name item, the documentation in paragraph (b)(1)(i) of this section only applies to the portion of the purchase requiring the brand-name item. The documentation should state it is covering only the portion of the acquisition which is brand-name.

5. Unique Qualifications / Circumstances of Requirement:

Okta is the only purely cloud-based identity service that is FedRAMP-authorized and FIPS 140-2 certified for MFA, meeting the highest federal security standards. It is also the only federated identity management solution authorized under FedRAMP that has been certified by Zscaler to integrate with the Zscaler Security Cloud— ensuring secure, seamless access across both platforms.

6. Efforts to Determine Only One Source:

In accordance with FAR 5.101(a)(1), this Justification for Other Than Full and Open Competition (JOFOC), along with all supporting documentation, shall be posted electronically to the Contracting Opportunities page on the System for Award Management (SAM) website (www.sam.gov) to promote transparency and provide an opportunity for interested parties to respond. The supporting documentation will include a statement that all responsible sources may submit a capability statement, proposal, or quotation, which shall be considered by the agency. This public notice ensures that potential offerors are informed of the agency’s intent and are afforded a fair opportunity to demonstrate their ability to meet the requirement.

http://www.sam.gov/

7. Contracting Officer’s Determination:

I have reviewed the above JOFOC, and determined that based on the information provided, it is accurate and complete, the anticipated cost of any subsequent award would be in the best interest and fair and reasonable to the Government.

8. Market Research:

Okta representatives have informed the NTSB that there are multiple resellers of Okta Identity Cloud Software & Maintenance that work through Carahsoft.

9. Other Pertinent Information:

Carahsoft is the sole GSA contract holder for Okta products and serves as Okta’s authorized distributor. Okta permits certain value-added resellers (VARs) to reference its products under Carahsoft’s GSA schedule through formal Contract Teaming Agreements (CTAs). Carahsoft has indicated that it does not intend to compete directly with its resellers and, accordingly, will not respond to the Request for Quotation (RFQ).

10. List of Interested Parties:

None.

11. Efforts to Remove Barriers to Competition:

NTSB will continue to monitor the market for future acquisitions to identify new or improved products that meet or exceed requirements and that can be considered for competition.

12. Contracting Officer’s Certification The Contracting Officer certifies that this JOFOC is accurate and complete.