Next Generation Identity, Credential, and Access Management (NG-ICAM)

The Defense Information Systems Agency (DISA) is seeking information from potential sources to provide Department of Defense’s Enterprise-Identity, Credential, and Access Management (DOD E-ICAM) Support Capabilities. The DOD E-ICAM is a foundational component of the Department of War's (DoW) Zero Trust strategy, ensuring that the right individual has access to the right resources, at the right time, for the right reason. The required capabilities include Identity Provider (IdP), Master Entitlement Record (MER), Identity Governance & Administration (IGA), Automated Account Provisioning (AAP), Attribute Based Access Control (ABAC), Separation of Duties (SOD), Privilege Access Management (PAM), and Federation Hub. • Identity Provider (IdP): Implementing modern authentication standards, specifically Security Assertion Markup Language (SAML) 2.0 and OpenID Connect (OIDC) • Master Entitlement Record (MER): Creating and maintaining an authoritative reference for user access rights/controls • Identity Governance & Administration (IGA): Creating and supporting workflows for Role Based Access Control (RBAC) and Rule Based Access Control (RuBAC) • Automated Account Provisioning (AAP): Automating user access to applications and systems • Attribute Based Access Control (ABAC): Implementing ABAC in a commercial context or integrating a provided Government-off-the-Shelf (GOTS) tool • Separation of Duties (SOD): Implementing checks to prevent conflicts in user access privileges • Privilege Access Management (PAM): Implementing controls for system-level access between applications and the ICAM • Federation Hub: Enabling secure authentication and sharing trusted identity attributes across different organizations The anticipated Place of Performance is Fort Meade, MD.