SA000005-26_-_FINAL_SBO__11-03-26_.pdf

PDF 278 KB Posted Nov 3, 2026

Attached to: SMALL BUSINESS OPTION - SA000005-26 - Manage Engine Ad Manager Plus and Ad Audit Plus Implementation
Solicitation number: 0000040846
Issued by: Sacramento County, San Francisco City, California

About this file

Written by GovTribe AI · Nov 4, 2026

This is a final Small Business Option (SBO) solicitation document from the California State Treasurer's Office (STO) for implementation services of ManageEngine AD Manager Plus and AD Audit Plus at the Unruh building environment located at 915 Capitol Mall, Sacramento, CA 95814. The project involves deploying and implementing these system management and security audit tools within the state's existing infrastructure. The solicitation requires that all bidders must be small business certified. The document establishes the terms, requirements, and evaluation criteria for qualified vendors to provide comprehensive implementation services for these software solutions.

This solicitation includes a small business set-aside requirement, restricting participation to certified small business entities. Pricing terms and detailed cost structures are to be proposed by bidders based on the scope of work outlined in the supporting project documentation. The contract terms, implementation timeline, payment schedules, and any renewal or maintenance options would be specified in the complete solicitation documents and scope of work. Funding for this project is provided through the State Treasurer's Office budget allocations for technology infrastructure improvements and system upgrades.

View the file

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

FIONA MA, CPA

TREASURER

STATE OF CALIFORNIA

Small Business (SB) Option

Contract No. SA000005-26

MANAGE ENGINE AD MANAGER PLUS AND

AD AUDIT PLUS IMPLEMENTATION

YOUR COMPANY MUST BE CERTIFIED AS A SMALL BUSINESS OR MICROBUSINESS

THROUGH THE CALIFORNIA DEPARTMENT OF GENERAL SERVICES IN ORDER TO

SUBMIT A BID TO PROVIDE THESE SERVICES.

Get Certified: https://caleprocure.ca.gov/pages/sbdvbe-index.aspx

November 3, 2026

NOTICE TO PROSPECTIVE BIDDERS

The State Treasurer's Office (STO) is seeking implementation services for a new deployment of ManageEngine AD Manager Plus and AD Audit Plus at our Unruh building environment, located at 915 Capitol Mall, Sacramento, CA 95814.

All bids submitted to perform these services must explain the experience and qualifications of the company. Failure to provide all of the requested information, or deviation from the required format, will result in disqualification. The STO reserves the right to reject any or all bids.

Bids for these services must comply with all instructions included in the solicitation. Attached is a proposed sample contract that will be the result of this solicitation. It includes the Std. 213 Agreement and other standard contract provisions to which the selected Contractor will be bound. that the agreement that will be entered into with the State of California will include by reference the General Provisions for Information Technology, which may be viewed and downloaded online at https://www.dgs.ca.gov/PD/Resources/Page-Content/Procurement- Division-Resources-List-Folder/Required-Language-for-Solicitations-and-Contracts. The General Provisions for Information Technology are not negotiable. By submitting a bid, your company agrees to the terms and conditions stated in this solicitation.

COMMERCIALLY USEFUL FUNCTION (CUF) (Government Code 14837)

A certified small business/micro-business company must meet commercially useful function requirements under Government Code section 14837(d)(4). The selected Contractor must perform a “commercially useful function” relevant to this contract. The term “small business/micro-business contractor” means any person or entity that satisfies the ownership (or https://caleprocure.ca.gov/pages/sbdvbe-index.aspx https://www.dgs.ca.gov/PD/Resources/Page-Content/Procurement-Division-Resources-List-Folder/Required-Language-for-Solicitations-and-Contracts https://www.dgs.ca.gov/PD/Resources/Page-Content/Procurement-Division-Resources-List-Folder/Required-Language-for-Solicitations-and-Contracts management) and control requirements in accordance with Government Code Section 14837(d)(4) and provides services or goods that contribute to the fulfillment of the contract requirements by performing a commercially useful function. A person or an entity is deemed to perform a “commercially useful function” if that person or entity does all the following:

• Is responsible for the execution of a distinct element of the work of the contract

• Carries out the obligation by performing, managing, or supervising the work involved

• Performs work that is normal for its business services and functions

• Is not further subcontracting a portion of the work that is greater than that expected to be subcontracted by normal industry practices

A contractor will not be considered to perform a commercially useful function if the contractor’s role is limited to that of an extra participant to obtain the appearance of small business participation.

In responding to this solicitation, you are confirming that, under CCR 1896.15, your business provides goods and/or services that meet the definition of “commercially useful function.” All bidders are required to provide CUF documentation using the State’s Bidder Declaration (GSPD 05-105), and Commercially Useful Function (CUF) Evaluation, included in this solicitation. When completing the declaration, bidders must identify all subcontractors proposed for participation in the contract. Any bidder awarded a contract is contractually obligated to use the subcontractor for the corresponding work defined unless the State agrees to a substitution. The Commercially Useful Function (CUF) Evaluation must be completed by any certified SB, MB, and/or DVBE performing any element of the work in the proposed contract.

SCOPE OF WORK

Overview

The project aims to re-implement ManageEngine AD Manager Plus and AD Audit Plus as fresh deployments at the new State Treasurer’s Office headquarters, and to integrate AD Manager Plus with FreshService to enable service desk-driven identity management and access governance.

The engagement will replace the existing manual onboarding process — currently handled through FreshService tickets and direct Active Directory administration — with an automated, policy-driven user life cycle. It will also bring AD Audit Plus into active use for real-time Active Directory, file server, and Microsoft 365 auditing. The implementation will cover the complete feature set available under the existing licenses rather than basic onboarding.

Current Environment:

Both AD Manager Plus and AD Audit Plus are licensed and deployed within the environment.

However, since the original implementation team is no longer with organization, neither product is currently being utilized to its full potential.

• AD Audit Plus is not actively being used; audit, alerting, and reporting capabilities remain unconfigured.

• User onboarding is still performed manually through FreshService tickets and Active

Directory, without HR-driven or ticket-driven provisioning.

• Existing product servers are to be retired as part of the headquarters relocation.

Contractor Objectives

• Deploy AD Manager Plus and AD Audit Plus as fresh installations on new servers at the new headquarters.

• Implement seamless integration between AD Manager Plus and FreshService for ticket-driven identity provisioning.

• Automate user provisioning, modification, and de-provisioning across Active Directory and

Microsoft 365.

• Enforce conditional provisioning policies that distinguish standard employees from interns, contractors, and third-party users.

• Establish continuous auditing, alerting, and compliance reporting across Active Directory, file servers, workstations, and Microsoft 365.

• Enable the Service Desk and IT teams to independently manage future workflow, template, and policy changes.

• Increase operational efficiency by reducing manual intervention in user life cycle management.

• Configure automated folder maintenance.

Implementation Approach:

• Fresh Installation: Both AD Manager Plus and AD Audit Plus will be deployed as fresh installations on new servers at the new headquarters. The existing servers will be decommissioned.

• Active Participation: The Service Desk and IT teams will actively participate during the implementation so they can independently manage future workflow and policy changes.

• Full Feature Coverage: The implementation will cover the complete feature set available under the existing licenses, rather than a basic onboarding

Provisioning/De-Provisioning Requirements:

A) Conditional Provisioning

• Standard employees will be provisioned as domain users under the applicable organizational unit, group, and entitlement policy.

• Interns, contractors, and third-party users will be provisioned as guest identities with separate groups and entitlement policies.

• Provisioning logic will be driven by the user type / employment category attribute received from FreshService.

B) Automated De-provisioning

• User accounts will be disabled upon the defined trigger.

• Disabled accounts will be moved to a designated Organizational Unit (OU).

• Accounts will be automatically deleted after the 45 day retention period.

• Microsoft 365 licenses will be reclaimed as part of the de-provisioning sequence.

• File server permissions will be removed without manual intervention.

Project Deliverables:

A) Automated Processes

• User Provisioning Automation: Automatically create user accounts in Active Directory, Microsoft365, and Exchange upon a validated onboarding request in FreshService.

• User Modification Automation: Automatically modify user privileges, group memberships, and attributes in Active Directory and sync to Microsoft 365 based on FreshService change requests such as Job Title, Department, Office Location, and Supervisor.

• User De-provisioning Automation: Automatically disable user accounts in Active Directory, move them to the designated OU, remove Microsoft 365 licenses, revoke file server permissions, and delete the account after the agreed retention period.

B) User Templates

• User Provisioning Template: Specifies attributes and privileges assigned during user provisioning, with separate templates for employees and guest identities.

• User Modification Template: Defines attributes and privileges modified during user updates.

• User De-provisioning Template: Outlines the steps and actions taken during user deprovisioning.

C) Creation / Modification Rules

• Define rules to update user attributes in Active Directory based on FreshService data.

• Specify automatic group and OU assignment based on user type, department, and location.

• Implement rules for disabling accounts in Active Directory when marked inactive or terminated.

• Define rules for modifying privileges based on job role changes.

• Establish rules for running custom scripts during creation or modification.

Up to 5 creation rules and 5 modification rules will be configured, with a maximum of 15 rules each configured by ManageEngine and guidance provided for additional customer-side rules.

3 automations (provisioning, de-provisioning, modification), 3 workflows, and 3 templates (provisioning, de-provisioning, modification) will be set up.

MangeEngine will provide guidance creating a sample CSV for bulk importing creation/modification rules.

Implementation Checklist:

SCOPE ITEM APPLICABLE

PRODUCT

A. Deployment & Environment Configuration

Fresh installation on new servers at the new headquarters AD Manager Plus AD Audit Plus

Decommissioning of existing (legacy) servers post cut-over AD Manager Plus AD Audit Plus

Domain and Domain Controller configuration AD Manager Plus AD Audit Plus

Windows Member Server configuration AD Audit Plus

Windows File Server configuration AD Audit Plus

Workstation configuration AD Audit Plus

Configuration of one Microsoft 365 / Cloud tenant AD Manager Plus

AD Audit Plus

Agent configuration AD Audit Plus

Archive configuration AD Audit Plus

B. Auditing, Alerting & Reporting

Fresh installation on new servers at the new headquarters AD Manager Plus AD Audit Plus

Decommissioning of existing (legacy) servers post cut-over AD Manager Plus AD Audit Plus

Domain and Domain Controller configuration AD Manager Plus AD Audit Plus

Windows Member Server configuration AD Audit Plus

C. Identity Lifecycle & Automation

Naming format configuration AD Manager Plus

Template creation (provisioning, modification, de-provisioning) AD Manager Plus

Creation and modification rule configuration AD Manager Plus Entra-only user provisioning – Configure workflow for provisioning Entra-only users. AD Manager Plus

Training:

• A two-hour integrated product walkthrough covering AD Manager Plus and AD Audit Plus shall be included as part of the implementation.

• Sessions should be tailored to day-to-day operations of the Service Desk and IT teams and should include hands-on exercises simulating real onboarding, modification, and offboarding scenarios.

STO Responsibilities:

• Provide new server infrastructure at the new headquarters meeting the published system requirements for both products.

• Provide credentials and access for Active Directory, Microsoft 365, file servers, and

FreshService.

• Ensure Service Desk and IT team availability throughout the implementation.

• Collaborate in testing and validation.

• Share specific customization requirements.

• Decommission the legacy product servers following successful cut-over.

Location and Travel:

Contractor must maintain an office located in California during the entire term of the Agreement, travel will not be reimbursed.

Term of Agreement:

The term of the Agreement will be from December 1, 2026 (or upon approval by the STO, whichever is later) through March 31, 2027. In the event of a delay, the STO may extend the term of the Agreement by four (4) additional months through July 31, 2027.

This Agreement shall not become effective until approved by STO. In no event shall services be performed prior to approval by the STO.

The maximum amount of this Agreement is $11,000.00. Rates shall remain unchanged throughout the term of the Agreement including all optional extensions, if any.

CONTENT AND FORMAT OF BID

All companies who wish to bid on this contract must submit a response as described below. All responses will be evaluated for completeness by the STO.

Cover Letter:

A cover letter must be included in your response and should indicate your agreement to participate in this solicitation. The cover letter should be concise and not more than three (3) pages in length. Bidder must provide sufficient information and background for AD Manager Plus and AD Audit Plus, FreshService integration, automated identity lifecycle management, conditional provisioning, auditing and compliance, and enabling the Service Desk and IT teams to manage future workflow and policy changes

At a minimum, the cover letter must include:

a. Primary business focus

b. Name, address, telephone number, and e-mail address for the contract representative

c. Headquarter address, if different from address above

Cost Sheet:

Bidder shall complete the attached Cost Sheet.

Payee Data Record (Std. 204):

Bidder must provide a taxpayer identification number (TIN) that has been assigned by the Federal government. The TIN is entered on the Payee Data Record (Std. 204) and retained in our accounting department. The most recent version of the Payee Data Record (Std. 204) is attached to this solicitation.

Bidder Declaration (GSPD-05-105):

Bidder shall complete the Bidder Declaration (GSPD 05-105) form to identify if they are a Small Business, Micro-Business, and/or Disabled Veteran Business Enterprise. The most recent version of the Bidder Declaration (GSPD 05-105) is attached to this solicitation.

Generative Artificial Intelligence (GenAI) Notification:

The State of California seeks to realize the potential benefits of GenAI, through the development and deployment of GenAI tools, while balancing the risks of these new technologies.

Government Code 11549.64 defines Generative Artificial Intelligence (GenAI) as an artificial intelligence system that can generate derived synthetic content, including text, images, video, and audio that emulates the structure and characteristics of the system’s training data. Proposer must notify the State in writing if it: 1. Intends to provide GenAI as a deliverable to the State; or

2. Intends to utilize GenAI, including GenAI from third parties, to complete all or a portion of any deliverable that materially impacts: (i) functionality of a State system, (ii) risk to the State, or (iii) contract performance.

Commercially Useful Function (CUF) Evaluation:

A certified small business/micro-business company must meet commercially useful function requirements under Government Code section 14837(d)(4) as identified above. The Commercially Useful Function (CUF) Evaluation must be completed by any certified Small Business, Micro-Business, and/or Disabled Veteran Business Enterprise performing any element of the work in the proposed contract. A copy of the Commercially Useful Function (CUF) Evaluation form is attached to this solicitation.

SUBMISSION OF BIDS

All bids should include the documents identified above. All documents requiring a signature must bear the signature of a person authorized to bind the bidding firm. Bids not including the proper required attachments will be deemed non-responsive. A non-responsive bid is one that does not meet the basic bid requirements and will be rejected.

Bids must be submitted for the performance of all the services described herein. Before submitting a response to this solicitation, bidders should review, correct all errors, and confirm compliance with the solicitation requirements. Any deviation from the specifications will not be considered and will cause a bid to be rejected. A bid may be rejected if it is conditional, incomplete, or if it contains any alterations of form or other irregularities of any kind. The State does not accept alternate language from a prospective contractor. A bid with such language will be considered a counter proposal and will be rejected. The State’s General Provisions for Information Technology are not negotiable. The State may reject any or all bids and may waive any immaterial deviations in a bid. The State’s waiver of an immaterial deviation shall in no way modify this solicitation or excuse the bidder from full compliance with all requirements if awarded the procurement. The STO reserves the right to reject any or all bids as the STO is not required to make an award.

Costs incurred for developing bids and in anticipation of award of the agreement are entirely the responsibility of the bidder and shall not be charged to the State of California.

The bidder must submit a minimum of one (1) unbound original and two (2) copies of their response to the department contact name and address specified in the section below.

BID DEADLINE

Bidder shall submit any questions about this solicitation in writing to itprocurement@treasurer.ca.gov no later than 4:00 p.m. PT on November 6, 2026. Answers to mailto:itprocurement@treasurer.ca.gov all questions will be provided on November 10, 2026. Bids and all required documents shall be submitted by 4:00 p.m. PT on November 17, 2026 at the following address:

State Treasurer’s Office, Information Technology Division Attn: Nayeem Mohammed 915 Capitol Mall, Suite 361

Sacramento, CA 95814

“DO NOT OPEN”

Electronic bids will also be accepted and may be submitted by the deadline to itprocurement@treasurer.ca.gov. Original signed documents may be required of the selected Contractor before final approval of the contract.

DISPOSITION OF BIDS

Upon receiving bids, all documents submitted in response to this solicitation will become the property of the State of California and will be regarded as public records under the California Public Records Act (Government Code Section 6250 et seq.) and subject to review by the public.

EVALUATION AND SELECTION

Once all responses are received, each bid will be checked for the presence or absence of required information in conformance with the submission requirements of this solicitation. The State will evaluate each bid to determine its responsiveness to the published requirements. Bids that contain false or misleading statements, or which provide references that do not support claims by the bidder, may be rejected.

According to Government Code 14838.5 there is no protest right for this solicitation. In addition, no Small Business preference or Disabled Veteran Business Enterprise incentive will apply to this solicitation.

AMERICANS WITH DISABILITIES ACT

For persons with a disability needing a reasonable accommodation to participate in this process, or for persons having questions regarding reasonable accommodations of the procurement process, you may email the contact provided above. The California Relay Service may also be used by dialing 7-1-1, or you prefer having your calls immediately answered in your mode of communication, dial one of the toll-free modality-specific and language-specific numbers below.

TYPE OF CALL LANGUAGE TOLL-FREE

800 NUMBER STO NUMBER

TTY/VCO/HCO to Voice English 1-800-735-2929 1-916-653-3965 Spanish 1-800-855-3000 1-916-653-3965

Voice to TTY/VCO/HCO English 1-800-735-2922 1-916-653-3965 Spanish 1-800-855-3000 1-916-653-3965

From or to Speech-to-Speech English 1-800-854-7784 1-916-653-3965 Spanish 1-800-854-7784 1-916-653-3965 mailto:itprocurement@treasurer.ca.gov

COST SHEET

SKU PRODUCT DESCRIPTION AMOUNT

87106.6AOBOL1

MANAGEENGINE AD MANAGER PLUS ADDONS -

SUBSCRIPTION MODEL - ADVANCED ONBOARDING AND

IMPLEMENTATION FOR AD MANAGER PLUS - ONLINE

88005.0AOBOL1

MANAGEENGINE AD AUDIT PLUS ADDONS - SUBSCRIPTION

MODEL - ADVANCED ONBOARDING AND IMPLEMENTATION

FOR AD AUDIT PLUS - ONLINE

TOTAL

PAYEE DATA RECORD

Please complete the most recent version of the Payee Data Record (Std. 204), located here:

https://www.documents.dgs.ca.gov/dgs/fmc/pdf/std204.pdf.

https://www.documents.dgs.ca.gov/dgs/fmc/pdf/std204.pdf

BIDDER DECLARATION

Please complete the most recent version of the Bidder Declaration (GSPD-05-105), located here:

https://www.documents.dgs.ca.gov/dgs/fmc/gs/pd/gspd05-105.pdf.

GENERATIVE ARTIFICIAL INTELLIGENCE (GENAI) NOTIFICATION

The State of California seeks to realize the potential benefits of GenAI, through the development and deployment of GenAI tools, while balancing the risks of these new technologies.

Bidder must notify the State in writing if it:

1. Intends to provide GenAI as a deliverable to the State; or

Yes No

2. Intends to utilize GenAI, including GenAI from third parties, to complete all or a portion of any deliverable that materially impacts:

(i) functionality of a State system,

(ii) risk to the State, or

(iii) contract performance.

Yes

For avoidance of doubt, the term “materially impacts” shall have the meaning set forth in State Administrative Manual (SAM) §4986.2 – Definitions for GenAI.

Failure to report GenAI to the State may result in disqualification. The State reserves the right to seek any and all relief to which it may be entitled to as a result of such non-disclosure.

Upon notification by a Proposer of GenAI as required, the State reserves the right to incorporate GenAI Special Provisions into the final contract or reject proposals that present an unacceptable level of risk to the State.

https://www.dgs.ca.gov/Resources/SAM/TOC/4900/4986-2

COMMERCIALLY USEFUL FUNCTION (CUF) EVALUATION

Every Certified SB, MB, and DVBE must complete this form if they will be performing any element of work.

CONTRACTOR INFORMATION

“DOING BUSINESS AS” (DBA) NAME: OSDS CERTIFICATION NUMBER: EXPIRATION DATE:

PLEASE MARK ALL THAT APPLY:

Small Business Micro Business Disabled Veteran Business Enterprise

Prime Contractor Sub-Contractor

COMMERCIALLY USEFUL FUNCTION

All Certified Small Businesses, Micro Businesses, and Disabled Veteran Business Enterprises must meet the commercially useful function requirements under Government Code Section 14837 (d)(4) and/or Military Veterans Code Section 999 (b)(5)(B).

Please answer the following questions as they apply to your business for the goods and/or services being acquired:

1. If your business is awarded the procurement, will your business be responsible for the execution of a distinct element of the resulting work?

Yes No

2. If your business is awarded the procurement, will your business carry out the obligation by actually performing, managing, and/or supervising the work involved?

Yes No

3. If your business is awarded the procurement, will your business be performing work that is normal for its business services and functions?

Yes No

4. If your business is awarded the procurement, will your business be responsible for the products, inventories, materials, and supplies required?

Yes No

5. If your business is awarded the procurement, will your business be subcontracting a portion of the work that is greater than normal industry standards?

Yes No

A response of “no” to numbers 1-4 or “yes” to number 5 above will result in disqualification.

AUTHORIZING SIGNATURE

The signatory of this document must be the certified business owner (or an authorized representative in the case of a corporation) and as such, hereby certifies under penalty of perjury under the laws of the State of California that all information provided herein is truthful and accurate.

AUTHORIZED REPRESENTATIVE SIGNATURE: TITLE:

PRINTED NAME: DATE:

Following section to be completed by the State Agency:

Requesting Agency: Requestor’s Name:

CUF Compliant: Yes No Evaluation Date:

Signature:

SCO ID:

STATE OF CALIFORNIA - DEPARTMENT OF GENERAL SERVICES

STANDARD AGREEMENT AGREEMENT NUMBER PURCHASING AUTHORITY NUMBER

(If Applicable)

STD 213 (Rev. 04/2020) SAMPLE TRE-0950

1. This Agreement is entered into between the Contracting Agency and the Contractor named below:

CONTRACTING AGENCY NAME

State Treasurer’s Office, Information Technology Division

CONTRACTOR NAME

TBD

2. The term of this Agreement is:

START DATE

December 1, 2026 (or upon approval by the State of California, whichever is later)

THROUGH END DATE

March 31, 2027

3. The maximum amount of this Agreement is:

$11,000.00 (eleven thousand dollars and zero cents)

4. The parties agree to comply with the terms and conditions of the following exhibits, which are by this reference made a part of the Agreement.

Exhibits Title Pages

Exhibit A Scope of Work 5

Exhibit B Budget Detail and Payment Provisions 1 Exhibit B, Attachment 1 Cost Sheet 1

Exhibit C Information Technology General Provisions 1 Items shown with an asterisk (*), are hereby incorporated by reference and made part of this agreement as if attached hereto.

These documents can be viewed at https://www.dgs.ca.gov/OLS/Resources

IN WITNESS WHEREOF, THIS AGREEMENT HAS BEEN EXECUTED BY THE PARTIES HERETO.

CONTRACTOR

CONTRACTOR NAME (if other than an individual, state whether a corporation, partnership, etc.)

TBD

CONTRACTOR BUSINESS ADDRESS CITY STATE ZIP

PRINTED NAME OF PERSON SIGNING TITLE

CONTRACTOR AUTHORIZED SIGNATURE DATE SIGNED

STATE OF CALIFORNIA

CONTRACTING AGENCY NAME

State Treasurer’s Office

CONTRACTING AGENCY ADDRESS CITY STATE ZIP

915 Capitol Mall Suite 361 Sacramento CA 95814

PRINTED NAME OF PERSON SIGNING TITLE

Nayeem Mohammed CIO

CONTRACTING AGENCY AUTHORIZED SIGNATURE DATE SIGNED

CALIFORNIA DEPARTMENT OF GENERAL SERVICES APPROVAL EXEMPTION (If Applicable) https://www.dgs.ca.gov/OLS/Resources

State Treasurer’s Office

SA000005-26

EXHIBIT A

(Standard Agreement)

SCOPE OF WORK

Overview

Current Environment

Both AD Manager Plus and AD Audit Plus are licensed and deployed within the environment.

However, since the original implementation team is no longer with organization, neither product is currently being utilized to its full potential.

• AD Audit Plus is not actively being used; audit, alerting, and reporting capabilities remain unconfigured.

• User onboarding is still performed manually through FreshService tickets and Active Directory, without HR-driven or ticket-driven provisioning.

• Existing product servers are to be retired as part of the headquarters relocation.

Contractor Objectives

• Deploy AD Manager Plus and AD Audit Plus as fresh installations on new servers at the new headquarters.

• Implement seamless integration between AD Manager Plus and FreshService for ticket-driven identity provisioning.

• Automate user provisioning, modification, and de-provisioning across Active Directory and

Microsoft 365.

• Enforce conditional provisioning policies that distinguish standard employees from interns, contractors, and third-party users.

• Establish continuous auditing, alerting, and compliance reporting across Active Directory, file servers, workstations, and Microsoft 365.

• Enable the Service Desk and IT teams to independently manage future workflow, template, and policy changes.

• Increase operational efficiency by reducing manual intervention in user life cycle management.

• Configure automated folder maintenance.

Implementation Approach

• Fresh Installation: Both AD Manager Plus and AD Audit Plus will be deployed as fresh installations on new servers at the new headquarters. The existing servers will be decommissioned.

• Active Participation: The Service Desk and IT teams will actively participate during the implementation so they can independently manage future workflow and policy changes.

• Full Feature Coverage: The implementation will cover the complete feature set available under the existing licenses, rather than a basic onboarding

Provisioning/De-provisioning Requirements

A) Conditional Provisioning

• Standard employees will be provisioned as domain users under the applicable organizational unit, group, and entitlement policy.

• Interns, contractors, and third-party users will be provisioned as guest identities with separate groups and entitlement policies.

• Provisioning logic will be driven by the user type / employment category attribute received from FreshService.

B) Automated De-provisioning

• User accounts will be disabled upon the defined trigger.

• Disabled accounts will be moved to a designated Organizational Unit (OU).

• Accounts will be automatically deleted after the 45 day retention period.

• Microsoft 365 licenses will be reclaimed as part of the de-provisioning sequence.

• File server permissions will be removed without manual intervention.

Project Deliverables