Limited Source Justification.pdf

LIMITED SOURCE JUSTIFICATION

Professional / Expert Services Hours Procurement

1. Agency, Contracting Activity and Document This is a Limited Source Justification for the National Science Foundation (NSF) and for the contracting activity is the Office of Budget, Finance, and Award Management (BFA), Division of Acquisition and Cooperative Support (DACS) located in Alexandria, VA.

2. Action Being Approved The National Science Foundation (NSF) proposes to initiate a purchase of Professional Service hours from a SailPoint reseller who is providing experts directly from SailPoint. The off-the-shelf professional services required are for SailPoint's part numbers PS- ES-160HRBLK and PS-ES-80HR-BLK only as stated in requisition. The procurement is needed to support the Identity and Access Management project. The SailPoint Identity IQ product will be used to replace the Oracle Identity Manager that supports the Identity life-cycle management of internal users (Employee/IPA/Contractor/Guest) and non-person (Service/System/Test/RPA) accounts to access NSF systems.

3. Description of Services/Supplies:

1. Professional/Expert services hours

2. The resources to support the below task should be a certified professional and expert from the SailPoint Professional/Expert services team.

3. The resource should be available minimum 3 days a week to support and work with

NSF team

4. Task to accomplish:

a. Review our current architecture including certification framework, document and provide recommendation for improvements.

b. Architect/Design Technical Solution and build Proto-Type, Configuration, and Deployment of NSF current Identity life-cycle Management (IDM) functionality into SailPoint

i. Joiner, Leaver and Mover

ii. Link/associate identities like person with Service/Test/BOT accounts

c. Provide Joiner/Leaver/Mover reports that support the IDM functionality migration and audit reports for the changes to the Identity/Account

d. Provide guidance, review implementation where necessary and help resolve any roadblocks

e. Identify and help fine tune the system to optimal performance

f. Review and Help resolve issues we have opened ticket with SailPoint. (NSF will provide document for the open issues)

5. Guidance, Discussion and Recommendations on the below tasks

a. Cloud Readiness (Migrate IDIQ into our AWS environment)

b. Recommend AWS database services (On Prem Oracle (by default) - AWS Aurora or

Postgres)

c. Compatibility for Java 11 and any open issues

d. SailPoint to use AWS SES to notify internal users (Feasibility and option for development)

6. Other tasks as mutually agreed upon by NSF and SailPoint

4. Justification Rationale

NSF uses the SailPoint IDIQ product to support access management to various NSF systems and resources. This effort is to consolidate the Identity life-cycle management into the SailPoint platform to reduce the burden for the staff users by using a system to manage their staff Identity and access needs.

The Identity life-cycle Management functionality is the core component of Identity platform and services we support here at NSF for users to access various application systems and its related services. Also, this effort help decommission the legacy Oracle implementation.

NSF is recommending SailPoint IdentityIQ to replace the OIM system based on the project requirements and the product’s following unique features to support our staff users:

• Single platform to manage and maintain Identities and Access controls

• NSF is required to manage full life-cycle management of person and non-person entities to access NSF systems and resources

• NSF is required to conduct person and non-person certifications periodically for security and audit requirements. SailPoint’s IdentityIQ provides unique flexibility in its access certification capabilities. NSF can choose between point-in-time, continuous, event-driven, and ad-hoc certifications.

• The product enables NSF to optimize the utilization of audit controls by identifying and displaying high-risk users in certifications, policy violation reviews, and access request management. SailPoint’s identity risk model leverages entitlements, roles, policy violations, and certification history to assess each user’s inherent risk to the organization.

• One of the key considerations for the consolidation into SailPoint IdentityIQ is end-user training and change management. The product uses the same user-friendly interface across all components of the product suite. All components of IdentityIQ provide a consistent look-and-feel, reducing training costs.

This is a brand name justification in the Government’s best interest to get the professional services from the product vendor to support the migration and implementation.

5. Market Research Market research was conducted by the Identity and Access Management team using publicly available information and contact with the vendor (including demonstrations of the

BALASUBRAMANIAN KRISHNAMOORTHY

2020.07.20 14:00:24 -04'00' product). The market research conducted was primarily concerned with locating vendors in the Identity and Access Management service area that the capacity to meet the high-level requirements for the project.

7. Additional Facts:

There are no other facts supporting this justification to be listed under this item. All supporting facts are stated in the preceding and following paragraphs.

8. Removing Barriers to Competition

There are no barriers to competition.

9. Certifications/Coordination/Approval

IT Project Mgr, OIRM/DIS: I hereby certify that the supporting technical data presented in this Limited Source Justification are complete and accurate.

Balasubramanian Krishnamoorthy Date

Contracting Officer: I assure that a detailed analysis will be performed on all proposed prices to assure that they are fair and reasonable. I also certify that this Limited Source Justification is complete and accurate.

Date

Blank Page