Identity and Access Management (IAM) - DRC260021
| Location: | Ohio |
|---|---|
| Posted: | Jan 1, 2026 |
| Due: | Jan 22, 2026 |
| Agency: | State Government of Ohio |
| Type of Government: | State & Local |
| Category: |
|
| Solicitation No: | SRC0000034194 |
| Publication URL: | To access bid details, please log in. |
| Solicitation ID: | SRC0000034194 |
| Solicitation Name: | Identity and Access Management (IAM) - DRC260021 |
| Original Begin Date: | 12/31/2025 10:00:00 AM |
| Begin Date: | 12/31/2025 10:00:00 AM |
| End Date: | 1/22/2026 1:00:00 PM |
| Inquiry End Date: | 1/15/2026 10:00:00 AM |
| Commodity: | Information Technology Broadcasting and Telecommunications |
| MBE Set Aside: | MBE Set Aside |
| Agency: | DRC-Dept of Rehab & Corrections |
| Solicitation Status: | Open for Bidding |
| Solicitation Type: | Request For Proposal (RFP) (Double Envelope) |
Solicitation General Information
|
In an MBE set-aside solicitation, only those bidders/suppliers with an active MBE certification at the time the solicitation closes can submit a response
|
|||
|
Solicitation ID
SRC0000034194
|
|||
|
Solicitation Name
Identity and Access Management (IAM) - DRC260021
|
RFx Type
Request For Proposal (RFP) (Double Envelope)
|
||
|
Lot #
1
|
Solicitation Status
Open for Bidding
|
||
|
Round #
1
|
MBE Set Aside
|
||
|
Begin Date
12/31/2025 10:00:00 AM (ET)
|
Amendment?
|
||
|
End Date
1/22/2026 1:00:00 PM (ET)
|
Inquiry End Date
1/15/2026 10:00:00 AM
|
||
|
Summary
The Ohio Department of Rehabilitation and Correction ( ODRC ) is soliciting competitive proposals from qualified vendors to provide an Identity and Access Management (IAM) Solution . The awarded vendor will be expected to deliver a secure, scalable, and cost-effective solution that supports ODRC's operational, security and compliance needs.
|
Predecessor Contract
|
||
|
Process
Offerors must review the attached RF
P document, follow the instructions provided, and submit all the required documentation via OhioBuys.
|
|||
|
Ship To
|
|||
1 Record(s)
|
0 Record(s)
|
Solicitation Documents
4 Record(s)
|
Attachment Preview
REQUEST FOR PROPOSALS
Sourcing Project:
SRC0000034194-DRC260021
The Ohio Department of Rehabilitation and Corrections is
requesting proposals for:
Identity and Access Management (IAM) Solution
All proposals must be submitted by January 22, 2026 at 1:00pm Eastern Time.
* All dates must follow OhioBuys Dates*
Page | 1
EXECUTIVE SUMMARY
PURPOSE. This is a Request for Competitive Sealed Proposals (RFP) under Section 125.071 of the Ohio Revised Code
(ORC) and Section 123:5-1-08 of the Ohio Administrative Code (OAC). The Ohio Department of Rehabilitation and
Correction (ODRC) is soliciting competitive sealed proposals (Proposals) for ORDC – DRC260021 and this RFP is the
result of that request. If a suitable offer is made in response to this RFP, the State of Ohio (State), through ODRC, may
enter into a contract (the Contract) to have the selected Offeror (the Contractor) perform all or part of the Project (the
Work). This RFP provides details on what is required to submit a Proposal for the Work, how the State will evaluate the
Proposals, and what will be required of the Contractor in performing the Work.
This RFP also gives estimated dates for the various events in the submission process, selection process, and performance
of the Work. While these dates are subject to change, prospective Offerors must be prepared to meet them as they
currently stand.
Once awarded, the term of the Contract will be from the award date through 06/30/2027. Any further renewals will be by
mutual agreement between the Contractor and ODRC for any number of times and for any period of time. The cumulative
time of all mutual renewals may not exceed four (4) years and are subject to and contingent upon the discretionary decision
of the Ohio General Assembly to appropriate funds for this Contract in each new biennium. ODRC may renew all or part
of this Contract subject to the satisfactory performance of the Contractor and the needs of the Agency.
Any failure to meet a deadline in the submission or evaluation phases and any objection to the dates for performance of
the Project may result in ODRC refusing to consider the Proposal of the Offeror.
BACKGROUND. ODRC was established under House Bill 494. Its responsibilities are defined in ORC 5120. ODRC is
the largest agency in the State of Ohio with operations throughout the State and is the fifth largest prison system in the
nation, consisting of twenty-five (25) state-administered adult correctional institutions and three (3) privately-operated
institutions. The current ODRC population is approximately 44,900. The institutions vary in level of security and include
corrections reception centers, correctional camps, and pre-release centers. The mission of ODRC is to reduce recidivism
among those we touch. The values of the agency are aligned to support the mission of the agency. The values of the
agency are as follows: (1) Take care of our staff; they will transform our offenders (2) One team-one purpose (3) Civility
towards all and (4) Hope is job one.
OVERVIEW. ODRC is seeking proposals for an Identity and Access Management (IAM) solution that can be deployed
as an on-premises hosted system within our existing virtualized environment. The solution must support the use of current
building access cards (ID badge) and be adaptable to future badge technologies that enable badge-tap access to Criminal
Justice Information Services (CJIS) workstations. The solution must also be accepted as compliant with the CJIS’ Security
Policy by the Law Enforcement Automated Data System (LEADS) and other applicable Ohio state and local government
authorities.
OBJECTIVES.
ODRC’s vision is to reduce crime in Ohio. ODRC’s mission is to reduce recidivism among those they touch. In alignment
with ODRC’s Vision and Mission, the goal is to implement a robust and secure Identity and Access Management (IAM)
solution that provides multifactor authentication (MFA) at the desktop level and Single Sign-On (SSO) functionality.
The MFA capability must function effectively in both online and offline states and support multiple authentication methods
such as badge, PIN, password, facial recognition, and fingerprint biometrics, but must not rely on phone-based
authentication. The IAM platform must also provide Single Sign-On (SSO) functionality across a diverse array of
applications, including locally installed software, in-house developed systems, web-based platforms, and legacy
mainframe or terminal-based (green screen) systems. The solution should also support automated rotation of Active
Directory (AD) and application passwords.
The solution should provide SSO with Entra ID. The solution should integrate with Cybersecurity standards (FedRAMP
certification, and so on).
This RFP will seek to procure ODRC software licensing. The agency is looking for a total of four thousand (4,000)
licenses, with the possibility of increasing the total number of licenses in the future, although not guaranteed
hardware equipment will be needed.
2|Page
The schedule for the Project is given below and is subject to change. If ODRC changes the schedule before the Proposal
due date, it will do so through an announcement via Ohio Buys. Inquiries for the RFP may be submitted through Ohio
Buys. Answers to each inquiry will be shared with the general public via the Ohio Buys System.
SUMMARY STATEMENT. ODRC is seeking proposals for a comprehensive Identity and Access Management (IAM)
solution to enhance security and streamline access control within the department's existing infrastructure.
PROOF OF CONCEPT (POC)
The Agency reserves the right to request a Proof of Concept (POC) from selected number of Offerors whose proposals
most closely align with the Agency's needs. Offerors may or may not be invited to participate in the POC.
In the event an Offeror is invited to participate, they must agree that all work, activities, materials, labor, and
resources associated with the POC will be provided at no cost to the ODRC.
ODRC will NOT issue any payments, reimbursements, or compensation of any kind related to the POC.
Participation and successful completion of the POC, when requested, is considered a mandatory requirement. Failure to
participate in or complete the POC as instructed will result in disqualification from further consideration.
The POC will be conducted after the solicitation has closed, Offerors who submit a bid can be considered for a POC. The
results of this process will be used to assess the Offeror's capabilities, validate solution performance, and determine the
Offeror's ability to meet the requirements of this RFP. The POC will require approximately forty-five (45) calendar days to
be completed. The POC period will begin after the close of the Solicitation and upon written notice from the Agency to
the Offeror(s) selected to participate. Offerors should ensure adequate resources and availability to complete all POC
activities within this timeframe.
POC Environment: Provide an on-premises hosted system within the existing virtualized environment. MFA must
function effectively in both online and offline environments. Solutions must not rely on phone-based
authentication methods.
Test Case: Install software on DRC provided server. If software is required for clients, then a way to disseminate
must be provided, such as MECM or some other methodology. Solutions must be compatible with DRC hardware
(readers (HID Omnikey 5022 & SE Plug) and badges (MiFare/DESFire EV3 & FIDO2). Provide live tech support
and troubleshooting during installation and/or PoC.
POC Final Deliverables
Each vendor must provide the following at the conclusion of the POC period:
1. Live Demonstration: A live walkthrough of the successful completion of the test case.
2. Written Report: A report documenting the methodology for implementation and description of the
long-term support model.
Was the Live Demonstration listed in the Final Deliverables completed? Y/N Score 50pts
Was the Written Report listed in the Final Deliverables provided? Y/N Score 50pts
CALENDAR OF EVENTS
The schedule of events for the RFP process and Work is provided in the solicitation general information section in
OhioBuys for this RFP. The State may change this schedule at any time. If the State changes the schedule before the
Proposal due date, it will post an amendment to this RFP in the OhioBuys public portal. Offerors must not contact Agency
staff or DAS (except as provided in this RFP) until the Contract award is announced.
Dates and time for this RFP, follow the instructions provided in OhioBuys, any such reference means the date and time
that the Proposals are due.
Proposals received after 1:00 p.m. Eastern time on the Proposal due date will not be evaluated. Any failure to meet a
deadline or any objection to the dates for performance of the work may result in the State refusing to consider a Proposal.
GENERAL INSTRUCTIONS
3|Page
The following sections provide details on how to get more information about this RFP and how to respond to this RFP. All
responses must be complete and in the prescribed format.
CONTACTS. The following person will represent ODRC:
Name: Jonikka Edwards
Agency Project Representative for this RFP
Contact via OhioBuys Inquiries
STATE OF OHIO ONLINE PURCHASING SOLUTION. OhioBuys provides the primary platform for Supplier partners to
engage in procurement activities with the State of Ohio. For additional information on submitting proposals see the
“Viewing and Responding to Solicitations” Learner Guide or the “Viewing and Responding to Solicitations” Supplier
Training Video linked below.
Learner Guide:
https://procure.ohio.gov/about/03_supplier-training/03_supplier-training
Viewing and Responding to Solicitations:
https://www.youtube.com/watch?v=K6iE32BUMJ0&feature=youtu.be
INQUIRIES. Offerors may make inquiries regarding this RFP any time during the inquiry period listed in OhioBuys. To
make an inquiry, Offerors must login to OhioBuys, navigate to the solicitation, open the Inquiry tab and submit their inquiry.
Offerors will not receive a personalized e-mail response to their question, nor will they receive notification when the
question has been answered.
Offerors may view inquiries and responses on the OhioBuys Public Solicitations page by opening the Solicitation Overview
and navigating to the inquiries section of that page. ODRC will try to respond to all inquiries within 48 hours of receipt,
excluding weekends and State holidays. ODRC will not respond to any inquiries received after 8:00 a.m. on the inquiry
end date.
During the performance of the Work, a State representative (the “Agency Project Representative”) will represent the
Agency and will be the primary contact for matters relating to the Work. The Agency Project Representative will be
designated at the Contract award.
ADDENDA TO THE RFP. If ODRC revises this RFP before the Proposal due date, an addendum will be issued via Ohio
Buys.
ODRC will reject any Proposals or unsolicited Proposal addenda that are received after the deadline.
ODRC may reject any Proposal if the Offeror takes exception to the terms and conditions of this RFP, fails to comply with
the procedure for participating in the RFP process, or the Offeror’s Proposal fails to meet any requirement of this RFP.
Any question asked during the inquiry period will not be viewed as an exception to the Terms and Conditions.
ORC Section 9.24 prohibits ODRC from awarding a Contract to any Offeror(s) against whom the Auditor of State has
issued a finding for recovery if the finding for recovery is “unresolved” at the time of award. By submitting a Proposal, the
Offeror warrants that it is not now, and will not become subject to an “unresolved” finding for recovery under Section 9.24,
prior to the award of a Contract arising out of this RFP, without notifying ODRC of such finding. ORC Section 9.231
applies to this contract.
CONFIDENTIAL, PROPRIETARY OR TRADE SECRET INFORMATION. ODRC procures goods and services through
a RFP in a transparent manner and in accordance with the laws of the State of Ohio. All proposals provided to ODRC in
response to this RFP become records of ODRC and as such, will be open to inspection by the public after award unless
exempt from disclosure under the Ohio Revised Code or another provision of law. Unless specifically requested by the
State, an Offeror should not voluntarily provide to ODRC any information that the Offeror claims as confidential, proprietary
or trade secret and exempt from disclosure under the Ohio Revised Code or another provision of law.
4|Page
EVALUATION OF PROPOSALS
EVALUATION OF PROPOSALS. The evaluation process consists of, but is not limited to, the following steps:
1. Certification. ODRC shall open only those proposals certified as timely.
2. Initial Review. ODRC will review all certified Proposals for completeness. ODRC may waive any defects or allow
an Offeror to submit a correction. If the Offeror meets all mandatory requirements listed herein, the State will
continue to evaluate the proposal.
3. Proposal Evaluation. The ODRC contact representative responsible for this RFP will forward all timely, complete,
and properly formatted Proposals to an evaluation committee, which the procurement representative will chair.
The evaluation committee will rate the Proposals submitted in response to this RFP based on criteria and weight
assigned to each criterion.
The evaluation committee will evaluate and numerically score each Proposal that the contract representative has
determined to be responsive to the requirements of this RFP. The evaluation will be according to the criteria
contained in this Part of the RFP. ODRC may further refine these criteria and has a right to break these criteria
into components and weight any components of a criterion according to their perceived importance.
4. Clarifications & Corrections. During the evaluation process, ODRC may request clarifications from any Offeror
under active consideration and may give any Offeror the opportunity to correct defects in its Proposal if ODRC
believes doing so does not result in an unfair advantage for the Offeror and it is in the State’s best interests. Any
clarification response that is broader in scope than what ODRC has requested may result in the Offeror’s proposal
being disqualified.
5. Interviews, Demonstrations, and Presentations. ODRC may require top Offerors to be interviewed. Such
presentations, demonstrations, and interviews will provide an Offeror with an opportunity to clarify its Proposal
and to ensure a mutual understanding of the Proposal’s content.
6. Contract Negotiations. Negotiations will be scheduled at the convenience of ODRC. The selected Offeror(s) are
expected to negotiate in good faith.
a) General. Negotiations may be conducted with any Offeror who submits a competitive Proposal, but
ODRC may limit discussions to specific aspects of the RFP. Any clarifications, corrections, or
negotiated revisions that may occur during the negotiations phase will be reduced to writing and
incorporated in the RFP, or the Offeror’s Proposal, as appropriate. Negotiated changes that are reduced
to writing will become a part of the Contract file open to inspection to the public upon award of the
Contract. Any Offeror whose response continues to be competitive will be accorded fair and equal
treatment with respect to any clarification, correction, or revision of the RFP and will be given the
opportunity to negotiate revisions to its Proposal based on the amended RFP
b) Top-ranked Offeror. Should the evaluation process have resulted in a top-ranked Proposal, ODRC may
limit negotiations to only that Offeror and not hold negotiations with any lower-ranking Offeror. If
negotiations are unsuccessful with the top-ranked Offeror, ODRC may then go down the line of
remaining Offerors, according to rank, and negotiate with the next highest-ranking Offeror. Lower-
ranking Offerors do not have a right to participate in negotiations conducted in such a manner.
c) Negotiation with Other Offerors. If ODRC decides to negotiate with all the remaining Offerors, or decides
that negotiations with the top-ranked Offeror are not satisfactory and negotiates with one or more of the
lower-ranking Offerors, ODRC will then determine if an adjustment in the ranking of the remaining
5|Page
This is the opportunity summary page. It provides an overview of this opportunity and a preview of the attached documentation.
Daily notification on new contract opportunities
With GovernmentContracts, you can:
- Find more opportunities and win more business
- Receive daily alerts for all new bid opportunities
- Get contract opportunities matched to your business
* Disclaimer: Information regarding bids, requests for proposals (RFPs), or requests for qualifications (RFQs) is provided on this website only for convenience and does not constitute official public notice. Persons wishing to respond to or inquire about bids, RFPs, or RFQs should contact the appropriate government department.