Identity Governance & Administration (IGA) and Privileged Access Management Solutions (PAM)

The Florida Department of Commerce is seeking a comprehensive Identity Governance and Administration (IGA) and Privileged Access Management (PAM) solution for its Identity and Access Management (IAM) processes, targeting staff, partner, and privileged user accounts. The procurement involves analysis, discovery, architectural services, and implementation of a modern IAM solution to replace a legacy, manually developed workflow system with inconsistent processes. Key deliverables include full identity lifecycle management, account provisioning and de-provisioning, support for non-staff identities, role-based access controls, and integration with existing systems like Microsoft Active Directory and Azure. The RFP requires vendors to analyze current processes, recommend solutions, support procurement, and implement selected platforms with comprehensive training and policy updates. Proposals are due on November 17, 2025, at 3:00 PM EST, with the project anticipated to run from January 5, 2026, to June 30, 2026. The solicitation emphasizes improving visibility into identities and access privileges, implementing controls to prevent unauthorized access, reducing manual overhead, and supporting centralized policies and automated processes.

While no specific set-aside designations are explicitly mentioned, the procurement requires vendors to demonstrate compliance with various security standards, including FedRAMP Moderate ATO and Zero Trust Architecture principles. The total procurement is not to exceed $525,000, with $380,000 specifically allocated for the IGA tool with PAM capabilities. The solution must support integration with existing technology infrastructure, particularly Microsoft Active Directory and Azure environments. The vendor will be responsible for managing thousands of user accounts across different systems and business units, with an emphasis on implementing robust security controls and streamlined access management processes. Potential bidders should have extensive experience in identity management solutions, strong technical capabilities in system integration, and the ability to support comprehensive policy and workflow transformations. The contract will be executed through the standard Vendor Core Contract Template, which includes provisions for public records access, non-discrimination, and various compliance certifications.