Questions and Answers for S5105A-12-T-0009 Virtual Directoryr.pdf

03/14/2012 1 OF 6

Questions (Q) and Answers (A) for RFQ S5105A-12-T-0009 Virtual Software Directory

1. What version of OVD is being used?

Answer: 10.3

2. What version of OAM is being used?

Answer: 10.3

3. Is OIM in the technology stack? If so, what version?

Answer: No.

4. What build number of SharePoint 2010 is being used?

Answer: 14.0.6114.5000

5. Please clarify "Oracle Management Suite" in below sentence of Solicitation:

DCMA requires a software solution that integrates Active Directory based CAC-enabled login with MS SharePoint and Oracle Management Suite.

Answer: Oracle Access Management Suite, aka OAM

6. We request a small business set-aside "rule of two" as our firm is an Oracle IdAM

Solution Provider & Reseller

Answer: All small business firms are given fair opportunity to provide solutions to this requirement.

7. Are you able to extend the RFQ due date of March 23rd, if yes we request an addition 2 weeks to respond.

Answer: The new RFQ due date is 29 March 2012 at 12 noon Eastern time.

8. Please describe computer hardware/servers that are running MS SharePoint and Oracle

Management Suite, and our proposed "Identity Federation" Solution.

Answer: All servers mentioned run in loadbalanced farms of Windows 2008R2 Servers.

9. Please detail number of user of described IdAM system

Answer: 12000 “employees” users plus 2000 “external users / business partners” users

10. Did an existing Systems Integrator assist government with formulating this Solicitation

Answer: No, but market research was conducted.

11. Does government have a small business -> on site, able+qualified to support this

Solicitation "Solution" when in production

Answer: Yes, DCMA has onsite IT support staff, however, Vendor Professional services must provide onsite support for design & implementation phases; after implementation

03/14/2012 2 OF 6

support requirements include training of DCMA’s IT support staff and providing email/phone-based technical support.

a. Is the Microsoft Active Directory the only back end source of identities and attributes?

Answer: No, there are also user profile & access attributes stored in Oracle RDBMS.

b. IE: are there any non-Microsoft source repositories?

Answer: Yes, Oracle RDBMS.

12. Relational databases?

Answer: Yes, Oracle RDBMS

13. IE: Human Resource data

Answer: No.

14. Web services?

Answer: No web services will be used as source repositories.

15. Other LDAP repositories?

Answer: Yes. iPlanet Directory (supporting COGNOS), MS ADAM

a. Is there a potential for identity collision taking place?

Answer: There are 3 distinct AD domains; these have zero overlap in user IDs. The Oracle

RDBMS tables contain all three domains’ users, in one table.

i. One person with multiple identities?

Answer: No, solution must allow a User’s AD account to be “joined” with their Oracle RDBMS records.

ii. The same person with identities in other source repositories?

iii. The same identity but for two or more different people?

b. How do you expect to manage groups?

Answer: The provided solution must provide a dynamic groups feature.

i. Does your group policy include dynamic membership and management through the application?

Answer: yes.

c. We wish to confirm that the user count (number of identities) is 14,000

03/14/2012 3 OF 6

Answer: User count is 14,000.

16. What Middleware Software is currently running for this IdAM Solution?

Answer: Oracle Virtual Directory + Custom-developed software (IWAM/EWAM)

a. Does government have a preferred Web Application Server for this Solution, based on current licensing & staff training/abilities

Answer: Our preferred Web Application Server is Spring tcServer. Second choice: Apache

Tomcat. Third choice: Microsoft IIS.

b. Does government have experience with Oracle WebLogic Server, per statement below:

c. "This includes configuration and design details such as: failover, load balancing, topology, etc."

Answer: Yes, we have experience with Oracle WebLogic Server and have no interest in gaining further experience with it.

17. I request you to provide us the following details before we buy the document:

List of Items, Schedule of Requirements, Scope of Work, Terms of Reference, Bill of

Materials required.

Answer: Specification was provided and attached for this RFQ

Soft Copy of the Tender Document through email.

Answer: Specification was provided and is attached to this Q and A.

Names of countries that will be eligible to participate in this tender.

Answer: This RFQ will be processed in accordance with Buy American Act rule.

Information about the Tendering Procedure and Guidelines

Answer:

Estimated Budget for this Purchase

Answer: It is up to the offeror to quote the best solution to include price for this effort/requirement.

Any Extension of Bidding Deadline?

Answer: Due to management timeline, the RFQ can only be extended through 29 March

2012 at 12 noon Eastern Time.

Any Addendum or Pre Bid meeting Minutes?

Answer: No Addendum; all documents pertaining to this requirement was incorporated into the RFQ S5105A-12-T-0009.

Reiterating the Specification for Virtual Directory Software:

DEFENSE CONTRACT MANAGEMENT AGENCY

03/14/2012 4 OF 6

Virtual Directory Software

DCMA requires a software solution that integrates Active Directory based CAC-enabled login with MS SharePoint and Oracle Access Management Suite.

Additional Key specifications include:

1. Software enables applications to connect to the software exactly as they do any normal

Lightweight Directory Access Protocol (LDAP) directory, using the standard LDAP protocol.

2. Software enables federation with standard Security Assertion Markup Language (SAML) or Active Directory Federation Services (ADFS) both internally as well with external users.

3. Software is certified by Microsoft to work with Windows Server 2003 and Server 2008

R2.

4. The software must provide a Single Sign-On (SSO) solution between SharePoint and eTools. The software must provide federation or translation of Common Access Card

(CAC)/Oracle Access Manager (OAM)/ Oracle Virtual Directory (OVD) headers.

5. The software must be able to integrate with Active Directory Federation Services (ADFS) to federate with other government agencies. The software must be able authenticating users across multiple directories, and extending the security and claims options for

ADFS.

6. The software must provide automated compliance for identity management for

SharePoint. This will be accomplished through single point of management workflows, reports, and dynamic claims-enablement across directories.

7. The software must include security token service (STS) for enhanced and federated authentication regardless of LDAP type.

8. The software must provide a full federation deployment to present a single provider login for multiple backend data stores.

9. The software must be able to manage automated provisioning of LDAP, Virtual, and

SharePoint groups from an administrative console.

10. The software must be able to function as a virtual layer between applications and other identity management platforms including Forefront Unified Access Gateway (UAG).

The solution must include Software, Software Maintenance, Software Support and Technical

Support during implementation. Software maintenance must include the latest software patches and product releases. Software support must be Premier Support providing 24 hour a day, 7 day a week support. The technical support shall include providing a training class for Administrators and professional service assistance with implementing the software during DCMA’s SharePoint

2010 deployment.

Professional Service: 60 hours of professional services will be provided. Vendor will perform product training as well as to assist in the design, installation and configuration of the software solution in DCMA's environment(s). Vendor will provide the training on site at DCMA's facilities. Provide a 2-3 day Administrator training class to a maximum of 10 people. Remaining hours will be performed as a mix of on-site and off-site assistance as requested by DCMA to include: Assistance in the design, deployment and configuration of solution for the SharePoint

2010 deployment. Creation of a reference architecture design for the deployment with

03/14/2012 5 OF 6

recommended best practices for DCMA. This includes configuration and design details such as:

failover, load balancing, topology, etc.

The table below shows a technically acceptable solution. Proposals should provide a like or better solution.

Item Description Quantity

0001 Maintenance OptimalIdM VIS Server Licenses 1

0002 Maintenance OptimalIdM VIS User CAL Licenses 14,000

0003 OPT-VIS-SP-VBR-CRVR 3.1 1

0004 OptimalIdM VIS User CAL Licenses 14,000

0005 Technical Support 60 hours

1001 Maintenance OptimalIdM VIS Server Licenses 1

1002 Maintenance OptimalIdM VIS User CAL Licenses 14,000

2001 Maintenance OptimalIdM VIS Server Licenses 1

2002 Maintenance OptimalIdM VIS User CAL Licenses 14,000

3001 Maintenance OptimalIdM VIS Server Licenses 1

3002 Maintenance OptimalIdM VIS User CAL Licenses 14,000

4001 Maintenance OptimalIdM VIS Server Licenses 1

4002 Maintenance OptimalIdM VIS User CAL Licenses 14,000

If installation of metering or auditing software is required the vendor must explicitly describe this requirement in the proposal or indicate where the description is in the product documentation.

If the vendors shall include license agreement with proposal.

Vendor shall prepare a Software Description Summary (Appendix A) and attaches it as well as an electronic version of the Licensing agreement to the Invoice. Please note: an invoice not including accurate information will be rejected as incomplete.

When required ship physical software media to:

DCMAIT-ITI

18901 S. Wilmington Ave DH-2

Carson, CA, 90746

03/14/2012 6 OF 6

Appendix A - Software Description Summary

Instructions: DCMA loads this information into its system for tracking software. Please complete/update the information in Blue. There should be one product description for every installable software product on the invoice. Bundled products should be broken out.

Contract: Contract# Order: Order #

Current Maintenance Start Date: 1/1/2009 End Date: 12/31/2010

Product: Software Name 1

Manufacturer’s Software License SKU / Part Number: XXXXXX

Manufacturer’s Software Maintenance SKU / Part Number: XXXXXX

Includes the following:

Unabbreviated non-technical description of software purchase. If the software has components, then each component shall be listed.

License Constraint: XXXX users, XXXX devices, ...

Product: Software Name 2

Manufacturer’s Software License SKU / Part Number: XXXXXX

Manufacturer’s Software Maintenance SKU / Part Number: XXXXXX

Includes the following:

Unabbreviated non-technical description of software purchase. If the software has components, then each component shall be listed.

License Constraint: XXXX users, XXXX devices, ...

(End of Q and A for S5105A-12-T-0009 Virtual Software Directory_