SOL Attachment 1. GACA for Google Drive.pdf
PDF 79 KB Posted
- Solicitation number
- 47PH0825R0002
About this file
This document provides instructions for using GSA Affiliated Custom Accounts (GACA) for Google Drive and Google Sites, dated May 11, 2016. It is an attachment to solicitation #47PH0825R0002 for a Design-Build Contract at the World Trade Bridge Land Port of Entry in Laredo, TX.
The document outlines the process for creating and securing Gmail accounts for GSA's external customers and partners who need to collaborate via Google Drive and Google Sites. Key requirements include: accounts must begin with "GSA." followed by the user's name, two-factor authentication is mandatory, and the systems must comply with FIPS 140-2 standards and use TLS 1.2 encryption at minimum. The process specifically applies to agencies and partners who have not implemented Google Apps for Government or Google Apps Premier. The document provides step-by-step instructions for account creation at mail.google.com/mail/signup and setting up two-factor authentication using a cell phone. GSA IT Security Staff monitors compliance with these requirements for all shared Google Sites and Google Drive content.
View the file
Other files
Show all 27
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
GSA Solicitation No.
Document: C201-SB GC/December 2023 (The Solicitation)
Date: May 11, 2016 Subject: GSA Affiliated Custom Accounts (GACA) for Google Drive� and Google Sites�
Google Drive� and Google Sites� provide GSA employees a way to create, edit and share work from anywhere. Real-time collaboration can now be accomplished not only with other GSA employees, but also their customers and business partners. The collaborative data stored on the Google Drive� and Google Sites� systems are compliant to the Federal Information Processing Standard (FIPS) 140-2. This standard ensures that access to and transmission of the files on these systems is via a secure web page that requires the TLS 1.2 encryption standard at minimum. The GSA has provided a mechanism to ensure that customers and partners of GSA can access this information via a Gmail Account. Although anyone can create the Gmail account, the account must be created with the string beginning �GSA.� (The letters G S A and a period), and must have two factor authentication turned on.
Applicability - This process applies to those customer agencies and civilian partners that have not incorporated the use of Google Apps for Government or Google Apps Premier into their workplace. As these agencies and civilian partners already have Google accounts as part of their environment, this process is not required for sharing information with GSA and information can be shared with them using the same processes for sharing information within GSA, using their applicable Google accounts.
To create a Gmail account, go to http://mail.google.com/mail/signup, Complete the questionnaire, which includes the First and Last Name of the intended user, the logon name, which must start with �GSA.� (the letters G S A and a period), a simple password (which will be changed for a PIN later), and a recovery email address. Submit the request and accept the Terms of Service by clicking on �I accept�.
Once the �GSA.� account is setup, the Gmail users can enable two-factor authentication by going to their Account Settings; reached via the pull down menu. Select the Accounts and Import tab, then Other Google Account settings.
The Sign-in and security page will open in a separate window. Select �2-Step Verification� in the �Password & sign-in method� section. This one time process will walk the Gmail user through the creation of the two factor authentication setup. The process is easy, only requires a cell phone that can receive simple messages, and only takes 10-15 minutes to complete. Note that the �Google Authenticator'' application is available for Android, iOS, and BlackBerry so most any smartphone can be turned into a token-generating device.
The GSA IT Security Staff will monitor all shared Google Sites� and Google Drive�, notifying GSA users of non-compliance with this process. Once notified, if the share is reported to be with a user that maintains an account with a Google Apps for Government or Google Apps Premier, no further action will be required.
File details come from the government source that posted it. Updated .