Managed Cloud Solution

The University at Buffalo intends to make an award under our discretionary authority, pursuant to NYS Education Law §355 (5) (a), which is up to $125,000, for a Managed Cloud wireless onboarding solution. A sealed bid will not be held. If you are interested in providing a proposal for the above commodity/product or service, you must contact the appropriately designated Campus contact in this advertisement within 15 business days of this Advertisement Notice.

The University at Buffalo (“University”) is seeking the below services:

A hybrid on-prem and cloud-based, wireless onboarding, mobile-friendly portal to streamline the onboarding process for our managed, faculty/staff devices and unmanaged/BYOD student devices. The process replaces passwords with certificate-based authentication, automating device onboarding, 802.1X configuration, and policy enforcement reducing IT workload while ensuring secure access for all users. The system must fully support the following capabilities:

• Automatic device 802.1x configuration software compatible with every OS, which includes guided user flow where necessary.
• Configure for device or user certificates.
• Enables easy configuration for server certificate validation.
• From start to finish, configuration takes only a minute or two.
• Support for iOS, Windows, macOS, Android, ChromeOS, Linux, and Kindle.
• Restrictive browser support.
• SSL inspection for BYODs
• Fully customizable onboarding page that can be edited as necessary, including the design, instructions, and which operating systems are supported.
• Ability to create multiple landing pages for various types of access, such as for our guest network or Eduroam.
• Onboard for whichever protocol we need, including PEAP, EAP/TTLS-PAP, or EAP-TLS.
• Connection reporting, device analytics, and remote troubleshooting.
• Give your helpdesk access to reporting, with reports on onboarding logs, RADIUS logs, and more.
• Integrate with multiple Identity engines including SAML, AD, EntraID, LDAP, etc.
• API gateways – Universal SCEP, AD and Intune API, JAMF integration.
• Zero-touch certificate distribution and renewal via extensive APIs including SCEP, JSON, WSTEP, EST, and more
• Auto-revoke certificates through our MDM when a user/device leaves the organization.
• Proven integration with all major MDMs including JAMF, Intune, AD Domain, Workspace One, MobileIron, Meraki,
• Completely customizable Certificate Authorities and Templates for all user and machine certificates.
• Integration with ACME for automation to ensure only a trusted device connects to the network.
• Guest Wi-Fi Access – self-registration, device-registration, encrypted guest via Gmail ID and SMS, Sponsored and trusted guest IDs.
• Individual client and CS creation via CSR.
• Extended Key Usage (EKU) – client/server authentication, application access, code-signing, email protection, KDC authentication, IKE IP security.
• External SSO login.
• Full-fledged API support.
• Third party CA support.
• Real-time intelligence for all our services.
• Intuitive single-pane management with granular control of certificate lifecycles.