Michigan State University is seeking a proposal for Account Claim and Identity Verification Software. The current system for account claim and identity verification is outdated, inefficient, and poses security risks. The new system should allow users to claim accounts without using a pre-shared secret, have automated processes for verifying government-issued IDs and other documentation, and integrate with MSU's existing systems. The proposal should include a detailed description of the solution, implementation framework, and pricing. The university is looking for a comprehensive and secure solution that streamlines the process, reduces manual work, and improves the overall user experience.
Key features and requirements include:
• Develop an IT policy for account claiming
• Implement self-service functionality for account claims
• Automated process using SMS, alternate email, RSA SecureID, etc.
• Claim process works for a limited time to reduce risks
• Users required to register password reset, account recovery options, and a MFA factor at the time of account claim
• Real-time process based on business rules established by Admissions and Registrar's Office
• Integration with MSU's backend systems for claim validation
• Notification system for claim status updates
• Capability to expire account claim codes after an allotted timeframe
• Document upload and OCR capabilities
• Fraud detection and flagging for suspicious activity
• Multi-factor ID verification
• Government-issued IDs and address verification from countries including and other than the United States of America
• Real-time and asynchronous verification workflows
• On-screen error messages for formatting issues
• Accessibility guidelines and WCAG 2 compliance
• Regulatory and privacy requirements (e.g., GDPR and FERPA)
• Multiple on-screen language options
• Responsive design compatible with desktop, tablet, and mobile devices
• International IP addresses
• Administrative dashboard for monitoring and managing account claims
• Access controls and role-based permission settings
• Reporting and analytics tools
• Case management system including notes, history, and escalation paths
• Cloud-based or hybrid deployment options
• API access for integration with other MSU systems
• Secure data storage and transmission (encryption in transit and at rest)
• Audit trails for all user and administrative activity
• Uptime SLA (e.g., 99.9%) and scalability to handle peak demand
• Compatibility with an external identity provider (e.g., SAML, OAuth, OIDC)
• Industry standards (e.g., SOC 2, ISO 27001)
• Clear escalation procedures with a dedicated account manager and customer support contact
• Regular updates, patches, and bug fixes