Identity and Access Management (IDAM) Solution

{
  "buyer": {
    "id": "GB-FTS-130632",
    "name": "Scottish Water"
  },
  "date": "2025-07-30T16:33:47+01:00",
  "description": "https://atamis-scottishwater.my.salesforce-sites.com/ProSpend__CS_PublicLandingPage?SearchType=Projects",
  "id": "044443-2025",
  "initiationType": "tender",
  "language": "en",
  "ocid": "ocds-h6vhtk-05697e",
  "parties": [
    {
      "additionalContactPoints": [
        {
          "email": "help@scottishwater.co.uk"
        }
      ],
      "address": {
        "countryName": "United Kingdom",
        "locality": "Glasgow",
        "postalCode": "G33 6FB",
        "region": "UKM",
        "streetAddress": "The Bridge, 6 Buchanan Gate, Stepps"
      },
      "contactPoint": {
        "email": "struan.macara@scottishwater.co.uk",
        "name": "Struan MacAra",
        "telephone": "+44 7880460643",
        "url": "https://atamis-scottishwater.my.salesforce-sites.com/ProSpend__CS_PublicLandingPage?SearchType=Projects"
      },
      "details": {
        "buyerProfile": "https://www.scottishwater.co.uk/",
        "classifications": [
          {
            "description": "Water",
            "id": "WATER",
            "scheme": "TED_CE_ACTIVITY"
          }
        ],
        "url": "https://www.scottishwater.co.uk/"
      },
      "id": "GB-FTS-130632",
      "identifier": {
        "legalName": "Scottish Water"
      },
      "name": "Scottish Water",
      "roles": [
        "buyer",
        "mediationBody"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Glasgow",
        "postalCode": "G5 9DA",
        "streetAddress": "1 Carlton Place"
      },
      "id": "GB-FTS-2553",
      "identifier": {
        "legalName": "Glasgow Sheriff Court"
      },
      "name": "Glasgow Sheriff Court",
      "roles": [
        "reviewBody"
      ]
    }
  ],
  "tag": [
    "tender"
  ],
  "tender": {
    "classification": {
      "description": "Software package and information systems",
      "id": "48000000",
      "scheme": "CPV"
    },
    "contractTerms": {
      "performanceTerms": "See Procurement Documents for further information."
    },
    "coveredBy": [
      "GPA"
    ],
    "description": "Scottish Water is looking to refresh the existing Identity and Access Management (IDAM) technologies (including Microsoft Identity Manager), with a Cloud Based solution and the implementation of a fully supported model (including third party alliance management).",
    "documents": [
      {
        "documentType": "economicSelectionCriteria",
        "id": "economic"
      },
      {
        "documentType": "technicalSelectionCriteria",
        "id": "technical"
      }
    ],
    "hasRecurrence": false,
    "id": "SW25/DIG/1511",
    "items": [
      {
        "deliveryAddresses": [
          {
            "region": "UKM"
          }
        ],
        "deliveryLocation": {
          "description": "Scotland Wide"
        },
        "id": "1",
        "relatedLot": "1"
      }
    ],
    "legalBasis": {
      "id": "32014L0025",
      "scheme": "CELEX"
    },
    "lots": [
      {
        "contractPeriod": {
          "durationInDays": 2880
        },
        "description": "1. Background Information\u003cbr/\u003e\u003cbr/\u003eScottish Water is looking to refresh the existing Identity and Access Management (IDAM) technologies (including Microsoft Identity Manager), with a Cloud Based solution and the implementation of a fully supported model (including third party alliance management). The solution will ensure that Scottish Water will have control of the End-to-End lifecycle of the user accounts (internal and external third parties), as well as evidencing simplification and improvements to the existing process and technology currently in place.  \u003cbr/\u003e\u003cbr/\u003e The end solution must also ensure there is an enhanced level of resilience for critical national infrastructure whilst removing manual interventions, improving existing control processes and maintaining relevant policies and compliance (e.g. UK DPA and General Data Protection Regulation).  \u003cbr/\u003e \u003cbr/\u003eThe successful solution must be able to support Scottish Water\u2019s technical future expectations and is expected to provide the technical capabilities for and transform how the organisation approaches its Identity and Access Management needs and processes. \u003cbr/\u003e\u003cbr/\u003e \u003cbr/\u003e2. New Contract Requirements\u003cbr/\u003e \u003cbr/\u003eEnd to End solution/application capable of managing and transforming the Scottish Water Identity and Access Management Processes which includes: \u003cbr/\u003e\u003cbr/\u003ePlatform replacement of current IDAM solution with a modernised Identity Governance Admin (IGA) Platform \u003cbr/\u003e\u003cbr/\u003e\u2022 Replacement of Microsoft Identity Management (MIM). \u003cbr/\u003e\u003cbr/\u003e\u2022 Refresh of supporting orchestration engine \u2013 e.g. Entra ID. \u003cbr/\u003e\u003cbr/\u003e\u2022 Improved audit and reporting capabilities on the Joiners, Movers, Leavers (JML) and Risk Management processes for access management. \u003cbr/\u003e\u003cbr/\u003e\u2022 Capabilities to enable automated Role Based Access Controls with third party applications, e.g. Entra Id, Oracle, WorkDay with the potential for deployment into Scottish Water to be considered with the potential for deployment into Scottish Water via recognised integration approaches (e.g. Connextors/APIs) \u003cbr/\u003e\u003cbr/\u003e\u2022 Consistent user experience (internally and for third-parties) so they can view permissions and access rights.  \u003cbr/\u003e\u003cbr/\u003e\u2022 Decommissioning of existing Identity and Access Management Technologies. \u003cbr/\u003e \u003cbr/\u003e\u003cbr/\u003eDeployment into Scottish Water \u003cbr/\u003e\u003cbr/\u003e\u2022 Manage the End-to-End delivery and transition to the new IDAM solution to support the technology and process changes required for the SW strategy (including Design, Development, Configuration and Data Management). \u003cbr/\u003e\u2022 Manage the required integration to Input (e.g. HR or ServiceNow) systems or Output systems (e.g. Directories or Applications).  \u003cbr/\u003e\u2022 Management of all required decommissioning. \u003cbr/\u003e\u2022 End to End test management and test activities for the new IDAM processes. \u003cbr/\u003e\u2022 The IGA tool must provide functionality to help Scottish Water leverage analytics to detect and respond to anomalous access patterns or potential security risk.  \u003cbr/\u003e\u2022 Ownership and completion of all relevant deliverables to support the Scottish Water internal change governance and framework, including stakeholder management. \u003cbr/\u003e\u2022 Delivery of communications and training as agreed appropriate with Scottish Water. Evidence of existing training already incorporated with vendors own solution. \u003cbr/\u003e\u003cbr/\u003e \u003cbr/\u003ePolicy, Support and Maintenance \u003cbr/\u003e\u003cbr/\u003e\u2022 Compliance with all relevant data, identity and access policies and regulations such as UK DPA \u0026 General Data Protection Regulation (GDPR). \u003cbr/\u003e\u2022 Consistent policies across Scottish Water for on-premises and hosted (cloud) services.  \u003cbr/\u003e\u2022\tOwnership and completion of all relevant governance deliverables in line with Scottish Water Digital Change framework. \u003cbr/\u003e\u2022 Evidence of vendor supportability, timelines and service management criteria.  \u003cbr/\u003e  \u003cbr/\u003e\u003cbr/\u003eBusiness Process Optimisation \u003cbr/\u003e\u003cbr/\u003e\u2022 Analysis of processes and tools for managing digital identity lifecycle for Employees, and third parties (e.g. Delivery Partners, Contractors and supply chain orgs) and have the capabilities to manage machine identities. \u003cbr/\u003e\u2022 The IGA tool should have the capabilities to connect Business to Business and Business to Customer. \u003cbr/\u003e\u2022 Tools and supporting processes to manage the user lifecycle from provisioning through to de-provisioning of accounts and access rights, authentication \u0026 applications. \u003cbr/\u003e\u2022 Increased automation, efficiency and speed of JML process. \u003cbr/\u003e\u2022 Full audit and reporting capabilities on the JML and Risk Management processes for access management. \u003cbr/\u003e\u2022 Development of Role Based Access Control optimisation and appropriate Risk Management and Security checks in the processes. \u003cbr/\u003e\u003cbr/\u003eThe solution must be able to support all Scottish Water employees and third-party identities\u2013 mapping of these requirements is required (includes Europe (EU) and other offshore locations). \u003cbr/\u003e\u003cbr/\u003eData storage must follow Scottish Water policies on geographical requirements. \u003cbr/\u003e\u003cbr/\u003eAlthough remote working is likely, where face to face collaboration is necessary, it is expected Scottish Water\u2019s principal office at The Bridge, 6 Buchanan Gate, Glasgow G33 6FB will be deemed the project base address, and any travel or associated cost would be absorbed by the vendor and not Scottish Water. Additional information: https://atamis-scottishwater.my.salesforce-sites.com/ProSpend__CS_PublicLandingPage?SearchType=Projects",
        "hasOptions": false,
        "hasRenewal": false,
        "id": "1",
        "secondStage": {
          "minimumCandidates": 3
        },
        "status": "active",
        "submissionTerms": {
          "variantPolicy": "notAllowed"
        },
        "value": {
          "amount": 4000000.0,
          "currency": "GBP"
        }
      }
    ],
    "mainProcurementCategory": "goods",
    "otherRequirements": {
      "reductionCriteria": "See Procurement Documents for further information."
    },
    "procurementMethod": "selective",
    "procurementMethodDetails": "Negotiated procedure with prior call for competition",
    "status": "active",
    "submissionMethod": [
      "electronicSubmission"
    ],
    "submissionMethodDetails": "https://atamis-scottishwater.my.salesforce-sites.com/ProSpend__CS_PublicLandingPage?SearchType=Projects",
    "submissionTerms": {
      "languages": [
        "en"
      ]
    },
    "techniques": {
      "frameworkAgreement": {
        "maximumParticipants": 1
      },
      "hasFrameworkAgreement": true
    },
    "tenderPeriod": {
      "endDate": "2025-08-25T12:00:00+01:00"
    },
    "title": "Identity and Access Management (IDAM) Solution",
    "value": {
      "amount": 4000000.0,
      "currency": "GBP"
    }
  }
}