The State of North Dakota is seeking a commercial off‑the‑shelf or SaaS user‑access‑review certification solution that enables managers, system owners, and security administrators to conduct, certify, and audit role‑based access reviews across multiple state applications. The solution must integrate with the State’s Microsoft Entra ID/Azure AD environment, provide robust reporting for federal and state compliance, support automated permission collection, and include ongoing maintenance, support, and licensing. Vendors must demonstrate experience delivering comparable identity‑governance solutions in regulated government settings and must meet FedRAMP, HITRUST, or StateRAMP security authorizations.
• Core functional requirements: granular role‑based reviews, workflow automation, audit‑trail, notifications, orphaned‑account detection, and exportable reports.
• Technical environment: Hybrid on‑premises and Azure cloud, Windows 10+, Microsoft 365 suite, single AD domain, and strict data‑hosting rules per N.D.C.C. § 54‑59‑22.
• Evaluation weighting: Technical (80 pts) – IT Solution (55 pts), Enterprise Specs (5 pts), Product Support (10 pts), Experience (10 pts); Cost (20 pts).
• Contract type: Cooperative purchasing technology contract with a base term ending April 30 2028, up to four one‑year renewals, and optional 12‑month extension.