Description
The State of Colorado is seeking a comprehensive, cloud-hosted Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solution to enhance security and streamline the authentication process for Colorado residents. The ideal solution will provide a robust, modern, and user-friendly authentication system that aligns with federal requirements and guidelines. The scope of work includes platform provisioning and configuration, identity and authentication management, application integration, security, compliance, and testing, as well as ongoing service delivery and support. The contract term is estimated to be 62 months, with an initial term of 26 months and optional renewal periods. Key features of the solution include federated SSO, adaptive MFA, self-service functionality, and a user-friendly interface. The State is looking for a vendor with relevant experience, organizational capabilities, and financial stability to successfully execute a project of this scale and complexity.
Some of the key requirements include:
• Integrated SSO and MFA capabilities
• Adaptive authentication with advanced threat and fraud detection
• Real-time risk scoring and user lifecycle management
• Scalability and flexibility to accommodate growth in user volumes
• Compliance with NIST 800-63B and Colorado Information Security Policies (CISP)
• Alignment with the National Strategy for Trusted Identities in Cyberspace (NSTIC)
• A user-centric, accessible design with a configurable and WCAG 2.2 AA-compliant user interface
• A robust administrative interface for monitoring, managing, and reporting on integrations and configurations
• Predictable and scalable pricing model with a clear description of the pricing structure and cost breakdown