NEA Research Grants in the Arts, FY 2027

Background
The Transportation Security Administration (TSA) is seeking to renew subscriptions for the existing Okta Identity and Access Cloud Solutions license, maintenance, and support. The goal is to provide Context Aware Multi-Factored Authentication (MFA) through Okta’s Adaptive MFA Identity Directory and Universal Directory. This initiative aims to enhance security measures for TSA resources by ensuring that all users utilize Personal Identity Verification (PIV) credentials when accessing TSA systems.

Grant Details
The vendor is required to provide the following services:
1. Renewal of subscriptions for Okta Identity Management Software including licenses for Adaptive MFA, Universal Directory, and Lifecycle Management.
2. Provide a Premier Success Plan - Gold and Sandbox - Preview Sandbox for testing purposes.
3. Ensure that the solution is FedRAMP approved and complies with CDM ICAM Reference Architecture.
4. Support Org2Org configuration with DHS Auth Portal, enabling seamless access across different Okta organizations without creating separate user accounts.
5. Integrate with Microsoft Active Directory and Oracle Identity Management to enable Single Sign-On (SSO).
6. Implement Multi-factor Authentication (MFA) capabilities that include voice call back verification or email one-time codes, along with PIV card support.
7. Provide policy-based access management that adjusts MFA requirements based on user context or device location.
8. Deliver 24x7x365 operational remote telephone and technical software maintenance support.

Eligibility Requirements
Vendors must be FedRAMP approved and comply with the security requirements set forth by TSA, including adherence to Section 508 standards for accessibility.

Period of Performance
The contract will be performed from September 30, 2026, to September 29, 2027.

Grant Value
The total value of the grant has not been specified in the document; however, it includes multiple licenses for various IT products totaling 81,000 units each for Adaptive MFA, Universal Directory, and Lifecycle Management.

Place of Performance
The services will be performed remotely as indicated by the requirement for operational support.