RFP #92337 Identity Management, Governance, and RBAC Modernization Services

The intent of this Request for Proposals (“RFP” or “Solicitation”) is to provide Identity Management, Governance, and RBAC Modernization firms an opportunity to present their qualifications, experience, and conceptual approach to providing the scope of services in relation to the needs of UMGC.

UMGC lacks a modernized originating identity provider (“OIP”) between Workday and Microsoft Entra. Current identity data is not aligned between the two platforms, creating inconsistencies that require evaluation and remediation. [...] The objective of this RFP is to work with a qualified Offeror to develop a strategic and technical approach for adopting RBAC and IGA capabilities across third-party applications and services by aligning them with centralized identity management systems and authoritative identity sources.

The following Scope of Services sets forth UMGC’s requirements and expectations for the Services. The requirements noted herein are not intended to be exhaustive, and UMGC reserves the right to modify or supplement these requirements in accordance with the terms of the resulting Contract.

Scope areas

• Identity Foundation and Data Alignment Support
• IGA Governance and Identity Lifecycle Management Support
• Third-Party Application RBAC and IGA Alignment
• PeopleSoft Dependency and Provisioning Migration Support
• Key Personnel Requirements: The Key Personnel for this project are the Project Manager and the Technical Lead.

Project Deliverables

The awarded Contractor will provide the following Deliverables:

• Originating Identity Provider (OIP) Modernization including: Organization Code Modernization Plan; Foundational Design Build Framework/Plan of RBAC within Workday & Entra
• Identity Governance Administration (IGA) Framework including: Production of Access Governance and Role Management Framework; Production of IGA Governance and Operating Model; Development of implementation processes for Business Unit and Technical team alignment; Production of Identity Lifecycle Management Framework including: Joiner, Mover, Leaver (JML) Lifecycle Maturation
• Third Party & Critical Application RBAC Alignment including: Assessment of the current-state readiness of Microsoft Entra ID to support RBAC adoption and alignment across third-party and critical applications.
• Inbound Provisioning Plan of Action including: Migration plan to utilize Workday + Entra for Identity Provisioning and Identity Management; Analysis of PeopleSoft Identity Flags & Persona utilization across infrastructure to gather and define attribute requirements within core business and technical processes; Development of a technical plan to decouple PeopleSoft identity flag requirements from business and technical processes, enabling the removal of PeopleSoft dependencies from provisioning and identity management.

Service Levels

• Weekly Reporting: Status report including RAID log delivered every Thursday by 5 PM ET.
• Workshops: Workshop materials distributed to stakeholders 5 business days before sessions; notes and follow-up actions shared within 2 business days after.

The Contractor will provide services for this project during UMGC’s standard business hours (Monday – Friday, 8am – 5pm EST). All project activities will be conducted remotely using virtual meeting platforms. Onsite presence at UMGC's offices is not required for this engagement.

This RFP shall be conducted in accordance with USM Procurement Policies and Procedures. The procurement method is Competitive Sealed Proposals.

Submission

Technical Proposals must be **uploaded electronically** at the UMGC Bid Locker link https://bidlocker.us/details/6550 no later than the date and time indicated in the Solicitation Schedule. File names for the Technical Proposal documents are to include the RFP number and the Proposer’s name. **NO PRICING INFORMATION** is to be provided in the Technical Proposal. Proposers must be registered on Bid Locker prior to uploading proposals. Late Proposals will not be considered.

Price Proposals will be requested at the appropriate time via addendum to all applicable shortlisted firms, with an anticipated due date of **12/16/2026 no later than 10:00 a.m. ET**.

Evaluation

The Technical Criteria, items 2.1 through 2.9 are listed below in order of importance. Offerors are requested to compile their Proposals in the same order. The Bid/Proposal Affidavit and Acknowledgement of Receipt of Addenda (if applicable) must be included. Oral Presentation/Discussion Session(s) are anticipated the week of 11/16/2026 for shortlisted Offerors only.

Contract term

It is intended that 1 (one) contract will result from this Solicitation. The Contract shall be in effect for one year, with an anticipated start date on or about February 8, 2027 unless otherwise extended, expired, or terminated pursuant to this Contract.

A pre-proposal conference will not be held for this procurement.