rapid identity implementation and iam, active directory ...€¦ · iam, active directory and...

7
REQUEST FOR PROPOSAL SQ # 10692 Rapid Identity Implementation and IAM, Active Directory and Office 365 Roadmap MIDDLESEX COUNTY COLLEGE 2600 Woodbridge Avenue Edison, New Jersey 08818-3050 December 4, 2019 NOTE: THIS DOCUMENT IS FOR INFORMATIONAL PURPOSES ONLY. THIS IS NOT AN OFFICIAL BID DOCUMENT.

Upload: others

Post on 15-Aug-2020

9 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Rapid Identity Implementation and IAM, Active Directory ...€¦ · IAM, Active Directory and Office 365 Roadmap . Vendor to provide an assessment and roadmap for a number of critical

REQUEST FOR PROPOSAL

SQ # 10692

Rapid Identity Implementation and IAM,

Active Directory and Office 365 Roadmap

MIDDLESEX COUNTY COLLEGE

2600 Woodbridge Avenue

Edison, New Jersey 08818-3050

December 4, 2019

NOTE: THIS D

OCUMENT IS FOR IN

FORMATIONAL P

URPOSES ONLY

. THIS IS

NOT AN O

FFICIAL B

ID D

OCUMENT.

Page 2: Rapid Identity Implementation and IAM, Active Directory ...€¦ · IAM, Active Directory and Office 365 Roadmap . Vendor to provide an assessment and roadmap for a number of critical

CLIENT PROFILE

Middlesex County College (“the College”) was established in 1964 and became part of a statewide

network of 19 county colleges. The main campus is located in Edison, New Jersey on a portion of the

former Raritan Arsenal and consists of 36 buildings on 182 acres with about 800,000 square feet of

building space. Urban outreach centers in New Brunswick and Perth Amboy serve the people of those

communities. During 2017, the College enrolled approximately 12,000 credit students and 12,000

noncredit students. There are approximately 600 full time employees and 2,000 W-2’s issued annually.

The College offers associate in arts (A.A.), associate in science (A.S.), and applied associate in science

(A.A.S.) degree programs designed specifically for transfer to four-year colleges and universities in the

fields of business, education, arts, sciences and engineering technology. The Continuing Education

Division offers non-credit courses that reflect the needs, interests and activities of the community at large.

The College is a community college operating in the State of New Jersey as authorized under provision of

N.J.S.A. 18A:64A et seq. In addition, the College is subject to regulations and guidelines established in

the New Jersey Administrative Code 9:4 et seq.

The College is an Equal Opportunity Employer and Affirmative Action Institution.

PROJECT DESCRIPTION

Middlesex County College utilizes Identity Automation’s “Rapid Identity”, Active Directory and

Office365 products to support identity management at the college. The goal of this project is to address

several existing issues with the current deployment of Rapid Identity and provide a strategic plan for

IAM, Active Directory and Azure. This project should be broken into two main phases. Phase 1 – Rapid

Identity Implementation and Phase 2 – IAM, Active Directory and Office 365 Roadmap

PROJECT SCHEDULE

Middlesex County College intends to award a contract for services at the Board of Trustees meeting in

February 2020. Work should commence no later than the first week of March 2020 and be completed no

later than May 2020. It is the College’s intent to have the work completed as soon as possible.

SCOPE OF WORK

The company shall provide all the labor, software tools, and equipment in order to perform all the

consulting and implementation services required.

Page C-1

NOTE: THIS D

OCUMENT IS FOR IN

FORMATIONAL P

URPOSES ONLY

. THIS IS

NOT AN O

FFICIAL B

ID D

OCUMENT.

Page 3: Rapid Identity Implementation and IAM, Active Directory ...€¦ · IAM, Active Directory and Office 365 Roadmap . Vendor to provide an assessment and roadmap for a number of critical

Phase 1 – Rapid Identity Implementation

The list of items is detailed below.

ITEM Explanation

Student Action Set Student accounts are not being deleted. Might be

due to notification not being sent out. Review and

resolve.

Adjunct Supervisor Notification Logic

Add logic to send different supervisor notification

for adjuncts, when LASTTERMTAUGHT was

366 days ago.

Disabled accounts not being moved to disabled

OU

Employee accounts not being moved to disabled

OU when disabled

Account re-enables Disable accounts not being re-enabled and moved

to correct if criteria are met. Review and resolve.

Notification Role Change When an account has a role change, send email to

the user detailing preferred name, title,

department, union code (Unit), personal email

address, and new role information

Password Notification Ability to send notification prior to password

notification, 30days, 15 days, 10 days, 5, 4,etc,

Account Deletion Ensure both student and admin accounts are

deleted after 2 years + 1 day

Version Ensure MCC is running on latest LT version

Build and Deploy of fixes listed above

Company shall engage with Middlesex County College resources to finalize quick fix requirements,

update design documentation, build, test and deploy the solutions

Tasks:

Conduct requirements workshop;

Updates to design documentation, including:

Distribute updated design documents to MCC for review and feedback;

Execute on Customer Approved Design Document

Company Engineer will perform unit testing;

Company will support MCC’s execution of the UAT plan.

Support go-live;

Deliver updated build and run documentation.

Page C-2

NOTE: THIS D

OCUMENT IS FOR IN

FORMATIONAL P

URPOSES ONLY

. THIS IS

NOT AN O

FFICIAL B

ID D

OCUMENT.

Page 4: Rapid Identity Implementation and IAM, Active Directory ...€¦ · IAM, Active Directory and Office 365 Roadmap . Vendor to provide an assessment and roadmap for a number of critical

Deliverables/Sign-Off Phase 1

Item list closed out

Updated build and run documentation.

Rapid Identity functioning in production according to design documentation;

MCC to sign off on UAT completion

MCC to sign off on UAT configuration

Phase 2 – IAM, Active Directory and Office 365 Roadmap

Vendor to provide an assessment and roadmap for a number of critical IT infrastructure and service areas

including:

• Identity and access management processes and technology including lifecycle management and

enterprise authentication services such as SSO and multifactor authentication;

• Windows Server Active Directory environment including the consolidation of multiple domains and improving Active directory security and administrative model;

• The use Microsoft Azure and Office 365 (e.g., P1-3 and A3 subscription licenses).

This effort will include and focus on a strategy for the use of Office 365 file sharing with

products/services such as OneDrive and SharePoint Online as well as MCC on-premise solutions

(traditional Windows file shares and SharePoint on premise).

The following steps should be included with this phase of the project:

Step One – Project Kick-off and Planning

Step Two – Assessment \ Phase

o Gather Requirements for:

IAM Lifecycle management and enterprise authentication

Active Directory infrastructure and administrative model/security design;

Azure, Office 365 and file sharing.

Step Three – Strategic Plan & Roadmap

Objectives/Deliverables

Step One – Project Kick-off and Planning:

Objectives: To establish a clear understanding between the vendor and MCC project sponsors regarding the

objectives, scope and scheduling of the project and the approach that will be taken.

To establish an effective working relationship among all team members, including both the MTC

and MCC staff.

Page C-3

NOTE: THIS D

OCUMENT IS FOR IN

FORMATIONAL P

URPOSES ONLY

. THIS IS

NOT AN O

FFICIAL B

ID D

OCUMENT.

Page 5: Rapid Identity Implementation and IAM, Active Directory ...€¦ · IAM, Active Directory and Office 365 Roadmap . Vendor to provide an assessment and roadmap for a number of critical

Deliverables: Conduct Kick-off meeting

Define project participants and establish project schedule

Establish project management processes

Conduct project status meetings and status reporting

Step Two – Requirements Gathering:

Objectives: The objective of this step is to work with MCC technical resources to identify, review and

finalize requirements for improving the MCC identity and access management, Active Directory

and Azure/Office 365 environments including policy, process and technology.

Deliverables: Assessment findings to be used in Step 3

Step Three – Assessment and Roadmap:

Objectives: The objective of this step is to utilize the requirements identified in the previous step to develop

strategic recommendations for identity management, Active Directory, Azure, and Office 365

process and technology.

Deliverables:

Active Directory design;

o Active Directory Technical Design

o Active Directory Administrative Model

Assumption: All design to be delivered in Microsoft Word and Visio formats

Assessment and Roadmap;

WORK LOCATION(S)

Vendor to detail where project is to be performed and timing

Vendor to have weekly project status calls with MCC

Page C-4

NOTE: THIS D

OCUMENT IS FOR IN

FORMATIONAL P

URPOSES ONLY

. THIS IS

NOT AN O

FFICIAL B

ID D

OCUMENT.

Page 6: Rapid Identity Implementation and IAM, Active Directory ...€¦ · IAM, Active Directory and Office 365 Roadmap . Vendor to provide an assessment and roadmap for a number of critical

PRICE PROPOSAL

Proposal should include the following:

1. Vendor to provide hourly rates for proposal for each proposed consultant/role.

2. Pricing broken down by phase of the project. This is to be a not to exceed fee.

3. All anticipated travel expenses (IE airfare, transportation, meals, etc.) and include a travel

expenses should not exceed amount listed on proposal.

FORM OF PROPOSAL

Your written proposal should include the following:

1. Identification of the engagement team who will perform the services. This will include name(s)

of the lead consultant(s) and project manager(s) who would be assigned to the College, with a

resume of their professional background and accomplishments, as well as the number and

composition of the professional staff providing services to the College, and their respective years

of experience.

2. Company’s experience in implementing the Rapid Identity product in the education sector. Also

include a list of three relevant clients, past and present, to be used as references.

3. A brief summary on why your company is most qualified and should be selected to implement

identity management services for the College.

4. Specify the hourly rates for services, the total number of hours estimated to complete the project,

and a not-to-exceed total amount for the project. Proposal should separately identify any out-of-

pocket expenses.

SELECTION PROCESS

In determining the company best suited to perform the necessary services for the College, the company’s

reputation, size, experience and relative cost of services will all be taken into account. The College will

select the company that in the College’s sole judgment provides the most advantageous combination of

qualifications and price. Company proposals submitted will be evaluated based on the criteria as follows:

1. Cost of Services and Proposal: Compliance with all requirements of the RFP and an evaluation of

the cost of services submitted.

2. Qualifications: The professional and technical expertise and capabilities of the company’s staff

and any other consultants used to supplement the company’s staff as related to the requirements

of this engagement.

Page C-5

NOTE: THIS D

OCUMENT IS FOR IN

FORMATIONAL P

URPOSES ONLY

. THIS IS

NOT AN O

FFICIAL B

ID D

OCUMENT.

Page 7: Rapid Identity Implementation and IAM, Active Directory ...€¦ · IAM, Active Directory and Office 365 Roadmap . Vendor to provide an assessment and roadmap for a number of critical

3. Experience: The history of the successful delivery of identity management implementation

services for education clients within the last five years with similar scope, codes, laws and

regulation requirements of this engagement.

4. Staffing: Sufficient professional and support staff in place with demonstrated qualifications and

experience to successfully deliver quality services for this engagement in an efficient and timely

manner.

5. Relevant Engagements and County College Experience: A demonstrated ability to provide

consulting service cost estimates that compare favorably with actual bid costs as well as ensuring

that change orders are kept to a minimum. Knowledge of applicable codes, regulations, and laws

governing public entities with emphasis on the New Jersey County College Statute 18A:64A-25

et seq.

During the evaluation process, the selection committee may, at its discretion, request any or all companies

to make an oral presentation. Such presentations will provide companies with an opportunity to answer

any questions the selection committee may have on a company’s proposal. Not all companies may be

asked to make such oral presentations.

PAYMENT

Compensation will be made after presentation of invoices with monthly accounting attached. Monthly

accounting of consulting hours shall detail related accomplishments and activities.

Page C- 6

NOTE: THIS D

OCUMENT IS FOR IN

FORMATIONAL P

URPOSES ONLY

. THIS IS

NOT AN O

FFICIAL B

ID D

OCUMENT.