Identity Management System

Sacramento County Contract & Purchasing Services Division and Sacramento County Department of Airports (SCDA), operating Sacramento International Airport (SMF), are procuring a comprehensive Identity Management System (IDMS) through RFP 2026-RFP-0026 to replace manual, paper-based processes currently managing approximately 5,700+ Airport ID badges and credentials for 180+ Authorized Signatories. The selected contractor must design, develop, implement, and support an integrated platform that consolidates identity management and access control processes to automate badge application submission, renewal, modification, and revocation while supporting regulatory compliance with TSA requirements under 49 CFR Part 1542. The solution must include 123 mandatory functional requirements addressing application processing, authorized signatory portal management, audit capabilities, badge production, company enrollment, document management, email notifications, financial management, hardware and software integrations, security requirements, training, violations tracking, and reporting across Production, Development, and Test environments. Required qualifications include five years of continuous operation delivering Identity Management System or Physical Access Control System solutions; demonstrated technical application of 49 CFR Parts 1540 and 1542, TSA Security Directives, and California privacy laws; regular engagement in developing and integrating IDMS solutions with stakeholder systems including Designated Aviation Channeling (DAC) systems; comprehensive cost proposals submitted in Excel format with hardware, software, services, maintenance, and miscellaneous items priced separately across five years; and evidence that the proposed Project Manager and technical lead have prior experience implementing an IDMS with an Authorized Signatory Portal at three or more U.S. airports of similar size and complexity. Evaluation will consider proposer qualifications, organizational capacity, technical approach, functional and technical requirement responses, project management methodology, support and maintenance capabilities, pricing, customer references, and security compliance. The non-mandatory pre-bid meeting is scheduled for May 5, 2026, at 2:00 PM via Microsoft Teams; questions are due by May 26, 2026, at 4:00 PM; proposals must be submitted electronically through the SacCountyEbids portal by 4:00 PM Pacific Standard Time on June 23, 2026; and contract award is anticipated for August 11, 2026, with shortlisted contractors potentially invited to provide product demonstrations prior to final selection.

This procurement contains no identified set-asides for disadvantaged enterprises, though the RFP incorporates FAA Non-AIP Contract Provisions requiring federal civil rights compliance including Title VI of the Civil Rights Act of 1964, the Americans with Disabilities Act of 1990, Section 504 of the Rehabilitation Act of 1973, the Age Discrimination Act of 1975, and domestic preference for U.S.-produced goods and materials to the greatest extent practicable. No incumbent vendor or current contractor is identified in the procurement documents. The proposed solution must integrate with Sacramento County's existing enterprise infrastructure, including Microsoft Active Directory for authentication, Oracle and SQL Server databases, VMware ESX virtualization, NetApp SAN storage, Cisco networking equipment, Palo Alto firewalls, F5 load balancers with Web Application Firewall capabilities, and existing systems including Velocity Physical Access Control System (PACS), Telos DAC for background checks, livescan fingerprint systems, computer-based training platforms, and DL/Passport credential verification systems. For cloud-based solutions, contractors must achieve FedRAMP or StateRAMP Ready Status within 90 days of agreement execution and full authorization within 12 months; for on-premises solutions, specific security tools including CrowdStrike Falcon, Tanium, and Splunk Universal Forwarder must be implemented, and the County does not accept hosted solutions with data storage exclusively required in U.S.-based data centers. No specific budget range or award value is disclosed in the RFP documents; however, the comprehensive five-year support requirement, integration complexity, and substantial implementation scope suggest a significant procurement value, with pricing to be evaluated against detailed cost proposals addressing all hardware, software, services, maintenance, and professional services across development, testing, and production environments.