Annual Contract For Identity And Access Management (Iam

Background
The San Antonio Water System (SAWS) is seeking proposals for an Annual Contract for Identity and Access Management (IAM) Solution to enhance its public-facing online portals. The goal is to implement a modern IAM solution that replaces the existing custom-developed identity management system, providing secure, scalable, and standards-based authentication and authorization services. This initiative aims to improve the organization's security posture, reduce maintenance burdens, and support future digital growth.

Work Details
The selected IAM solution must seamlessly integrate into the existing portal experience without redirecting customers to a vendor-hosted site for authentication or account management. Key functional requirements include:

1. **Authentication**: Support for portal-native sign-in UI SDK/components or APIs, modern standards like OIDC/OAuth 2.0 and SAML 2.0, session management features, step-up authentication, remembered devices, passwordless options (e.g., email magic link), and configuration of single or multiple sessions per user.

2. **Registration and Onboarding**: Portal-native registration UI with configurable workflows for self-registration, email/phone verification during onboarding, collection of custom attributes with validation rules, terms/privacy acceptance support, and bot protection integration.

3. **Account Recovery and Credential Management**: Portal-native flows for password recovery, username/email recovery, MFA reset/recovery options, account unlocks, configurable password policies including breached password detection and reuse prevention.

4. **Multi-Factor Authentication (MFA)**: Support for various multi-factor methods including TOTP (authenticator apps), email OTP, and SMS OTP with fraud controls.

5. **User Profile Management**: Portal-native screens for viewing/editing profile attributes, communication preferences, consent management, and account deletion requests.

Period of Performance
The contract will commence upon the effective date of award and will terminate one year later after installation and acceptance. There is an option for SAWS to renew the contract for five additional one-year periods under the same terms.

Place of Performance
The services will be performed at the San Antonio Water System's facilities located in San Antonio, Texas.

Bidder Requirements
Bidders must provide proof of various lines of commercial insurance coverage as specified in Exhibit 'A' of the solicitation document. This includes Workers' Compensation insurance with statutory limits; Employers' Liability insurance with minimum limits of $1 million; Commercial General Liability insurance with minimum limits of $1 million per occurrence; Professional Liability Insurance with limits of at least $3 million per claim; Security and Privacy Liability insurance with minimum coverage limits of $3 million per claim; among others. Bidders are also required to submit a Good Faith Effort Plan (GFEP) demonstrating their commitment to equal employment opportunity practices.