RFI013024 Questions and Answers 022224.pdf
PDF 130 KB Posted
- Solicitation number
- RFI013024-02
- Issued by
-
GSA Office of Administrative Services
About this file
This document contains questions and answers related to a Request for Information (RFI) regarding Phishing Resistant Authenticator Products. The General Services Administration (GSA) issued the RFI to identify qualified contractors that can meet requirements for Federal Identity Credential and Access Management Phishing Resistant Authenticators. The purpose is to conduct market research on available phishing resistant authenticator capabilities that could be stand-alone or bundled with other identity tools. Responses will be shared government-wide through the Digital Identity Community of Practice or the Identity, Credential, and Access Management Subcommittee to understand capabilities and how they could potentially support a future government-wide acquisition vehicle or purchases to provide agencies with compliant multi-factor authentication.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| RF013024 SAM RFI- Phishing Resistant Authenticator 013024.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Questions Answers
1. What is the overall objective / goal of this RFI? Will GSA be doing any of the following:
Phishing resistant authenticator market research.
a. Standing up a GWAC or BPA for agencies to purchase MFA capabilities for conformance with M-22-09?
Potentially at a future date, right now we want to know what is available in the market.
b. Purchasing MFA capabilities for Login.gov Not a login effort, cannot speak to them, our findings from the RFI maybe shared.
c. Funding a blanket purchase of MFA capabilities for agencies to use
This is not the immediate intent.
2. There are few vendors in the market that offer MFA as a standalone service. Are there other capabilities that GSA expects to be bundled with this (e.g. account registration and creation, access management, identity verification, etc.)?
The market research intent is to learn about all phishing resistant authenticator capabilities, stand alone or ones that could work with other tools.
3. With which parts of GSA or government will the information from these responses be shared?
Depending on the usecase, government‐wide through the
Digital Identity CoP or ICAMSC.
4. There are few vendors in the market that offer
MFA as a standalone service. Are there other capabilities that GSA expects to be bundled with this
(e.g. account registration and creation, access management, identity verification, etc.)?
Answered on question 2.
Request for Information (RFI) RFI013024
Phishing Resistant Authenticator Products Market Research
VENDOR QUESTIONS & ANSWERS (February 22, 2024)
File details come from the government source that posted it. Updated .