Managed Cloud Solution

The University at Buffalo intends to make an award under our discretionary authority, pursuant to NYS Education Law 355 (5) (a), which is up to $125,000, for a Managed Cloud wireless onboarding solution. A sealed bid will not be held. If you are interested in providing a proposal for the above commodity/product or service, you must contact the appropriately designated Campus contact in this advertisement within 15 business days of this Advertisement Notice.

The University at Buffalo ( University ) is seeking the below services:

A hybrid on-prem and cloud-based, wireless onboarding, mobile-friendly portal to streamline the onboarding process for our managed, faculty/staff devices and unmanaged/BYOD student devices. The process replaces passwords with certificate-based authentication, automating device onboarding, 802.1X configuration, and policy enforcement reducing IT workload while ensuring secure access for all users. The system must fully support the following capabilities:

• Automatic device 802.1x configuration software compatible with every OS, which includes guided user flow where necessary.
• Configure for device or user certificates.
• Enables easy configuration for server certificate validation.
• From start to finish, configuration takes only a minute or two.
• Support for iOS, Windows, macOS, Android, ChromeOS, Linux, and Kindle.
• Restrictive browser support.
• SSL inspection for BYODs
• Fully customizable onboarding page that can be edited as necessary, including the design, instructions, and which operating systems are supported.
• Ability to create multiple landing pages for various types of access, such as for our guest network or Eduroam.
• Onboard for whichever protocol we need, including PEAP, EAP/TTLS-PAP, or EAP-TLS.
• Connection reporting, device analytics, and remote troubleshooting.
• Give your helpdesk access to reporting, with reports on onboarding logs, RADIUS logs, and more.
• Integrate with multiple Identity engines including SAML, AD, EntraID, LDAP, etc.
• API gateways Universal SCEP, AD and Intune API, JAMF integration.
• Zero-touch certificate distribution and renewal via extensive APIs including SCEP, JSON, WSTEP, EST, and more
• Auto-revoke certificates through our MDM when a user/device leaves the organization.
• Proven integration with all major MDMs including JAMF, Intune, AD Domain, Workspace One, MobileIron, Meraki,
• Completely customizable Certificate Authorities and Templates for all user and machine certificates.
• Integration with ACME for automation to ensure only a trusted device connects to the network.
• Guest Wi-Fi Access self-registration, device-registration, encrypted guest via Gmail ID and SMS, Sponsored and trusted guest IDs.
• Individual client and CS creation via CSR.
• Extended Key Usage (EKU) client/server authentication, application access, code-signing, email protection, KDC authentication, IKE IP security.
• External SSO login.
• Full-fledged API support.
• Third party CA support.
• Real-time intelligence for all our services.
• Intuitive single-pane management with granular control of certificate lifecycles.

Service-Disabled Veteran-Owned Set Aside: No

Minority Owned Sub-Contracting Goal: 17.9%

Women Owned Sub-Contracting Goal: 12.1%

Due date:09/09/2025 8:00 AM

8AM EST

Contract term: 1 year

County(ies): Erie

Location: SUNY Buffalo

* These goods or services have been purchased from an out-of-state/foreign vendor within the past three years.

Business entities awarded an identical or substantially similar procurement contract within the past five years:

SecureW2 Incorporated