SATPC0042764 Tab 07 2 SOW_Redacted.pdf
PDF 250 KB Posted
- Attached to
- GTI VibePro Modernization Service
- Solicitation number
- 80NSSC26943499Q
About this file
This is a Statement of Work for GTI VibePro Modernization Services required by NASA Marshall Space Flight Center (MSFC) in Huntsville, Alabama. The contract encompasses modernization of the VibePro application through two distinct phases, with a performance period of 4 weeks as requested (ARO).
Phase 1 focuses on Identity and Security Modernization, which replaces legacy authentication mechanisms (SiteMinder and LDAP) with a modern OAuth2/OIDC identity framework compatible with NASA's existing identity provider. Work includes syncing the codebase with the latest production version, configuring back-end and front-end systems for NASA's identity provider, mapping identity token data to user records, refactoring user management for token-based provisioning, removing legacy authentication code, building an AWS Cognito proof-of-concept environment, extending OAuth2/OIDC support to the iPad application, finalizing both web and iPad applications with comprehensive end-to-end testing, updating the iPad app repository, and providing remote installation support.
Phase 2 addresses Java and Framework Modernization by upgrading the VibePro back-end application to current supported technology standards. Deliverables include upgrading the Gradle build tool to current version, migrating the Java runtime to Java 21 LTS or Java 25, upgrading Spring Boot to version 4.x with associated code adjustments, executing full regression testing to validate application stability, producing a final production-ready back-end build, and providing remote installation support. Both phases emphasize proof-of-concept validation and comprehensive testing before final delivery to ensure application stability and security compliance.
View the file
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
6. Remove Legacy SiteMinder Integration: Remove deprecated SiteMinder authentication code from both the front-end and back-end, simplifying the codebase and eliminating an unsupported dependency.
7. Remove LDAP Authentication Support: Remove LDAP-based login from the back-end, replacing it entirely with the new OAuth2/OIDC standard.
8. Build AWS Cognito Proof-of-Concept Environment: Stand up a Nasa-representative test environment using AWS Cognito as the identity provider, used to validate the integration before final deployment.
9. Add OAuth2/OIDC Support to the iPad Application: Extend the same identity integration to the native iPad version of VibePro, ensuring a consistent and secure login experience across all platforms.
10. Finalize Web Application (Front-End & Back-End): Produce the tested and approved final deliverable version of the VibePro web application incorporating all Phase 1 changes.
11. Test Web Application Final Version: Conduct end-to-end testing of the web application to validate authentication flows, user data mapping, and overall application stability.
12. Update Nasa iPad App Repository: Update the source code repository for the iPad application so that Nasa's team can independently generate and distribute new app versions.
13. Test iPad Application Final Version: Conduct end-to-end testing of the iPad application to confirm OAuth2/OIDC authentication and all core features work correctly.
14. Remote Installation and Support: Support remote hands installation
JAVA AND FRAMEWORK MODERNIZATION PHASE 2-This phase brings the VibePro back-end application up to current supported technology standards.
The Java runtime, build tooling, and core Spring Boot framework will be upgraded to current LTS versions. Full regression testing ensures application stability before delivery
1. Upgrade Build Tool (Gradle): Update the application's build system to the current supported version of Gradle, enabling compatibility with newer Java and Spring Boot versions.
2. Upgrade Java Runtime Version: Migrate the application to Java 21 (LTS) or Java 25, ensuring the platform runs on a fully supported and actively maintained runtime with the latest security patches.
3. Upgrade Spring Boot to Version 4.x: Upgrade the core application framework from its current version to Spring Boot 4.x. This is the most complex step, as it may require code adjustments to comply with updated API contracts and deprecated features.
4. Regression Testing: Execute a full suite of regression tests across the application to identify and resolve any functional issues introduced by the framework and runtime upgrades.
5. Finalize Back-End (Production Build): Produce the final, validated back-end deliverable incorporating all Phase 2 upgrade changes, ready for Nasa's deployment pipeline.
6. Remote Installation and Support: Support remote hands installation
3. Place of Performance NASA Marshall Space Flight Center (MSFC)
Huntsville, AL 35812
4. Period of Performance 4 Weeks ARO
File details come from the government source that posted it. Updated .