Limited_Sources_J A_8.405-1(a)(i)(B)_HSPD-12_LACS___FINAL_signed.docx

LIMITED SOURCE JUSTIFICATION

FAR 8.405-6(a)(1)(i)(B), "Only one Source Capable of Providing the Supplies or Services"

National Archives and Records Administration 8601 Adelphi Road, Room 3340 College Park, MD 20740-6001

Identity, Credential, and Access Management Implementation Services

Technical Requirements Certification:

I hereby certify that this limited source justification for is made in good faith, that the supporting data and information are accurate and complete to the best of my knowledge and belief, and that I would not be making this request if it were feasible to fully compete this requirement. I further certify this request is not the result of a desire to expend funds while those funds are still available.

Chief Information Security Officer

Contracting Officer Concurrence:

I have reviewed this justification and conclude that it is accurate and complete to the best of my knowledge and belief.

Contracting Officer

Senior Acquisition Concurrence:

I have reviewed this justification and conclude that it is accurate and complete to the best of my knowledge and belief.

Director, BCN

General Counsel Concurrence:

I have reviewed this justification and consider it legally sufficient.

Legal Counsel

NARA Competition Advocate Approval:

In accordance with FAR Subpart 8.405-6(d) and NARA 501, I have reviewed this justification and hereby certify that it is accurate and complete to the best of my knowledge and belief.

NARA Competition Advocate

IDENTIFICATION OF THE AGENCY AND THE CONTRACTING ACTIVITY AND SPECIFIC IDENTIFICATION OF THE DOCUMENT AS A "LIMITED SOURCE JUSTIFICATION."

See Page 1

I. NATURE AND/OR DESCRIPTION OF THE ACTION BEING APPROVED.

The National Archives and Records Administration (NARA) is seeking to limit the competition for its requirement to the only General Services Administration (GSA) Federal Supply Schedule (FSS) vendor that possess Federal Identity Credential and Access Management (FICAM) knowledge and experience specific to a NetIQ Identity Manager and Novell eDirectory based architecture. The vendor must be capable of implementing a solution utilizing these software products and therefore must be a certified partner in both. TriVir, LLC is the only vendor with the specific knowledge base in FICAM that is also a certified partner in both NetIQ and Novell products and services.

A DESCRIPTION OF THE SUPPLIES OR SERVICES REQUIRED TO MEET THE AGENCY’S NEEDS (INCLUDING THE ESTIMATED VALUE).

NARA is in the process of implementing the Office of Management and Budget (OMB) Memorandum 11-11“Continued Implementation of Homeland Security Presidential Directive (HSPD) 12– Policy for a Common Identification Standard for Federal Employees and Contractors”. NARA is required to implement the use of the Personal Identity Verification (PIV) smartcard credentials as the common means of authentication for access to agency facilities, networks, and information system. NARA requires Vendor technical support to implement a Federal Identity Credential Access Management (FICAM) compliant identity management system to enable a Logical Access Control System (LACS). The system must enable PIV card authentication and automated provisioning for NARA users as well as integration with current and future FICAM compliant Physical Access Control Systems (PACS) at various NARA facilities. The vendor will be required to implement the solution in a manner consistent with NARA’s FICAM Architecture.

NARA’s current identity management infrastructure is based on the NetIQ Identity Manager technology and integrates with multiple Lightweight Directory Access Protocol (LDAP) compliant directories including, but not limited to, eDirectory and Active Directory. The use of a vendor with NetIQ and Novell specific ICAM knowledge and experience will ensure successful implementation of the solution, which will allow NARA to become compliant with the HSPD-12 requirements. This estimated value of this requirement is $608,000 and the period of performance is anticipated to be one (1) year.

IV. THE AUTHORITY AND SUPPORTING RATIONAL (SEE 8.405-6(a)(1)(i) and (b)(1)) AND, IF APPLICABLE, A DEMONSTRATION OF THE PROPOSED CONTRACTOR'S UNIQUE QUALIFICATIONS TO PROVIDE THE REQUIRED SUPPLY OR SERVICE.

41 U.S.C. 4104 – Title III of the Federal Property and Administrative Services Act of 1949 and Title 40 U.S.C. 501 - Services for Executive Agencies as implemented by 8.405-6(a)(1)(i)(B) "Only one Source is Capable of Providing the Supplies or Services".

V. A DETERMINATION BY THE ORDERING ACTIVITY CONTRACTING OFFICER THAT THE ORDER REPRESENTS THE BEST VALUE CONSISTENT WITH 8.404(d).

In accordance with FAR 8.404(d) the hourly rates listed on the GSA Schedule have been determined fair and reasonable. NARA will request a quotation to be submitted by TriVir, LLC and assess the reasonableness of the quotation by determining whether the labor categories, mix, and hours are reasonable to accomplish the tasks required. By placing an order against the GSA Schedule contract using the procedures under FAR Subpart 8.405, the ordering activity has concluded that the order represents the best value and results in the lowest overall cost alternative (considering price, special features, administrative costs, etc.) to meet the Government’s needs.

VI. A DESCRIPTION OF THE MARKET RESEARCH CONDUCTED AMONG SCHEDULE HOLDERS AND THE RESULTS OR A STATEMENT OF THE REASON MARKET RESEARCH WAS NOT CONDUCTED.

NARA conducted market research by searching the GSA Federal Supply Schedule e-Library as compared with the NetIQ and Novell partner network listings at https://www.partnernetprogram.com/partnerlocator/locator.do?country=US&partnertype=solution. NARA identified 19 partners that are both Novell and NetIQ partners in the United States based on information from that site. Of those 19, only one (1) partner has a GSA Schedule contract under the most appropriate Special Item Number (SIN) for these services. The most appropriate SIN for this procurement is: 132 60F, Identity and Access Management Professional Services.

Additionally, to ensure that there were no other sources capable of competing for this requirement available on the open market, NARA posted a sources sought at the Government Point of Entry, www.fbo.gov, seeking any Novell and NetIQ partners capable of implementing a FICAM compliant solution within the current network architecture. NARA received capabilities statements from seven (7) companies. Upon an assessment of all of the responses, NARA determined there was only one source that had both the NetIQ and Novell certified partner status that could perform these services, TriVir, LLC.

VII. ANY OTHER FACTS SUPPORTING THE JUSTIFICATION.

Previous analysis of the requirements to move towards compliance with HSPD-12 and the implementation of a LACS revealed several issues relating to PIV-2 authentication and provisioning for users and applications. Without the specialized knowledge, skills, and abilities to support the implementation of this project, NARA will be unable to meet the requirements for compliance.

VIII. A STATEMENT OF THE ACTIONS, IF ANY, THE AGENCY MAY TAKE TO REMOVE OR OVERCOME ANY BARRIERS THAT LED TO THE RESTRICTED CONSIDERATION BEFORE ANY SUBSEQUENT ACQUISITION FOR THE SUPPLIES OR SERVICES IS MADE.

NARA cannot remove or overcome any barriers that preclude the agency from meeting the requirements under FAR Subpart 8.405-2 before any subsequent acquisition for the services is made without changing its authoritative identity management and network infrastructure from NetIQ and Novell products. However, NARA will continuously monitor the market for available sources that are capable of providing these services that are both NetIQ and Novell certified partners should the need arise in the future.

IX. THE ORDERING ACTIVITY CONTRACTING OFFICER'S CERTIFICATION THAT THE JUSTIFICATION IS ACCURATE AND COMPLETE TO THE BEST OF THE CONTRACTING OFFICER'S KNOWLEDGE AND BELIEF.

See Page 1.

X. EVIDENCE THAT ANY SUPPORTING DATA THAT IS THE RESPONSIBILITY OF TECHNICAL OR REQUIREMENTS PERSONNEL (E.G., VERIFYING THE GOVERNMENT'S MINIMUM NEEDS OR REQUIREMENTS OR OTHER RATIONALE FOR LIMITED SOURCES) AND WHICH FORM A BASIS FOR THE JUSTIFICATION HAVE BEEN CERTIFIED AS COMPLETE AND ACCURATE BY THE TECHNICAL OR REQUIREMENTS PERSONNEL.

See Page 1.