RFI ESIM IAM Software Licenses and Professional Services Final.docx

Request For Information (RFI) – Identity and Access Management Software and Professional Services

** This Notice is issued in accordance with Federal Acquisition Regulation (FAR) Part 10 for the purposes of market research and acquisition planning. It is intended to provide early notification of a potential requirement and to solicit input from industry to help shape the upcoming solicitation. This is not a Request for Proposal (RFP) or Request for Quote (RFQ), and no formal solicitation exists at this time. If and when an RFP/RFQ is released, its terms may differ from the information provided in this Notice. **

1. Purpose This RFI is issued to identify qualified vendors capable of providing Identity and Access Management (IAM) software licenses, maintenance, subscription renewals, technical support, and professional services supporting the Department of the Treasury Enterprise Systems and Identity Management (ESIM) program.

2. Background The Department of the Treasury Office of the Chief Information Officer (OCIO) Enterprise Systems and Identity Management (ESIM) Logical Access Controls (LACs) program provides enterprise Identity and Access Management capabilities supporting Treasury bureaus.

These capabilities include:

· Identity Governance and Administration (IGA)

· Privileged Access Management (PAM)

· Single Sign-On (SSO)

· Federation

· Multi-Factor Authentication (MFA)

· PKI

· Derived PIV credentials

· Enterprise directories

· Access management

· Identity lifecycle management

· Mobile and remote authentication

Treasury currently utilizes commercial Identity Security platforms including Ping Identity, CyberArk, SailPoint, and Radiant Logic, and anticipates future requirements for software licensing, maintenance, professional services, and successor technologies.

3. Objective Treasury seeks information from industry regarding the availability of commercial solutions and services capable of supporting enterprise Identity and Access Management requirements.

The Government is interested in understanding industry's ability to provide:

· Software licensing and utilization monitoring

· Subscription renewals

· Manufacturer maintenance

· Professional services

· Technical support

· Training

· Technology refreshes

· Successor offerings for products supporting Treasury's enterprise IAM environment.

4. Scope The anticipated scope includes, but is not limited to:

Identity Platforms

· Ping Identity

· CyberArk

· SailPoint

· Radiant Logic

· UberEther

Functional Areas

· Identity Governance

· Privileged Access Management

· Directory Services

· Access Management

· Federation

· Single Sign-On

· Multi-Factor Authentication

· PKI

· Customer Identity

· Workforce Identity

· Partner Identity

· Identity Lifecycle Management

· SaaS and On-Premises Deployments

· FedRAMP Solutions

· Professional Services

· Training

· Technical Account Management

5. Anticipated Products and Services Treasury anticipates acquiring software licenses and services like those identified below.

Examples include:

· PingFederate

· PingAccess

· PingDirectory

· PingIDM

· PingGateway

· PingAM

· CyberArk Privileged Access Management

· CyberArk Endpoint Privilege Manager

· SailPoint Identity Security Cloud

· SailPoint Data Access Security

· SailPoint ServiceNow Integration

· SailPoint CyberArk Integration

· RadiantOne Identity Data Management

· RadiantOne Identity Analytics

· Professional Services

· Advisory Services

· Technical Account Management

· Training

The complete product listing contained in the attached document represents Treasury's current estimate of potential requirements and is provided for market research purposes only. Quantities and products are subject to change.

6. Technology Refresh Treasury is interested in understanding vendors' ability to provide:

· Updated software versions

· Successor products

· New capabilities

· Platform enhancements

· Subscription model changes

· Bundled offerings

· Newly released manufacturer products throughout the life of any future contract vehicle.

7. Areas For Industry Input Vendors responding to this Notice are encouraged to provide information regarding the following areas.

7.1 OEM Capability Matrix

Ping Identity

CyberArk

SailPoint

Radiant Logic

Other (Specify)

7.2 Questions for Industry

Treasury requests responses to the following:

1. Does industry believe a single enterprise-wide BPA encompassing multiple OEM software products, renewals, maintenance, technical support, and professional services is commercially viable? If not, explain why and recommend an alternative acquisition strategy.

2. If not, identify:

· Which manufacturers or functional areas would require separate contractual arrangements.

· Any OEM authorization or licensing restrictions that would prevent providing the full suite of products and services.

· Whether your company could serve as the prime contractor managing multiple OEM relationships under a single contract.

3. For each contract vehicle identified, describe any ordering limitations, OEM restrictions, ceiling limitations, or other contractual constraints that could affect Treasury’s ability to acquire the anticipated software and professional services through a single vehicle.

4. Beyond the products identified in this RFI, can your company provide additional commercial IAM software and successor technologies from other manufacturers through the same contract vehicle? Please describe the breadth of your IAM software portfolio.

5. Beyond the products identified in this RFI, can your company provide additional commercial IAM software and successor technologies from other manufacturers through the same contract vehicle? Please describe the breadth of your IAM software portfolio.

6. What lead times should Treasury expect?

8. RESPONSE CONTENT. Vendors responding to this notice are asked to provide the following:

Company Information

· Company Name

· UEI

· CAGE Code

· Business Size

· Primary Point of Contact

Authorized Reseller Status Indicate whether your company is an authorized reseller for:

· Ping Identity

· CyberArk

· SailPoint

· Radiant Logic

· UberEther

Provide documentation if available.

Contract Vehicles Identify all applicable contract vehicles, including:

· GSA Multiple Award Schedule

· NASA SEWP

· CIO-SP4

· 2GIT

· Other Government-wide contract vehicles

Technical Capability Describe your experience providing:

· Enterprise IAM software licensing

· Identity Governance

· Privileged Access Management

· Software renewals

· Tracking and Managing software utilization

Value-Added Services Describe any additional services including:

· License optimization

· Implementation support

· Training

· Technical Account Management

· Architecture services

Vendors are kindly requested not to provide extensive marketing materials, as such materials are not useful for the purposes of this Notice and may not be reviewed. Links to relevant product demonstrations, technical documentation, or publicly available reference materials may be provided where appropriate.

9. HOW TO SUBMIT A RESPONSE TO THIS NOTICE. Responses to this Notice shall be:

· Submitted via email to: chad.gambrill@treasury.gov and paul.white2@treasury.gov

· Use the subject line: “Response to RFI – ESIM Identity and Access Management Software-PW/CG”;

· Be provided in searchable Adobe PDF format (version 7.x or earlier), with at least 0.5-inch margins and no smaller than 10-point font;

· Be submitted no later than 2:00 PM Eastern Time on 31 July 2026. Responses received after this date and time may not be considered.

IMPORTANT NOTES:

· This notice is *NOT* a solicitation and does not obligate the Government to issue one or to award a contract.

· The government will not acknowledge receipt or provide feedback on submissions.

· Responses are not considered offers and cannot be accepted by the Government to form a binding agreement.

· The government will not reimburse any costs incurred in responding to this notice nor return any data provided.

· Submitted information may be used in development of future acquisition strategies or solicitations.

· Respondents should ensure all provided information provided is complete, accurate, and sufficiently detailed as it may be used for making acquisition approach decisions or better refine its requirements.

· The government may elect to engage further with some, all, or none of the respondents to this Notice.