Identity and Access Management (IDAM) Solution

1. Background Information<br/><br/>Scottish Water is looking to refresh the existing Identity and Access Management (IDAM) technologies (including Microsoft Identity Manager), with a Cloud Based solution and the implementation of a fully supported model (including third party alliance management). The solution will ensure that Scottish Water will have control of the End-to-End lifecycle of the user accounts (internal and external third parties), as well as evidencing simplification and improvements to the existing process and technology currently in place. <br/><br/> The end solution must also ensure there is an enhanced level of resilience for critical national infrastructure whilst removing manual interventions, improving existing control processes and maintaining relevant policies and compliance (e.g. UK DPA and General Data Protection Regulation). <br/> <br/>The successful solution must be able to support Scottish Water’s technical future expectations and is expected to provide the technical capabilities for and transform how the organisation approaches its Identity and Access Management needs and processes. <br/><br/> <br/>2. New Contract Requirements<br/> <br/>End to End solution/application capable of managing and transforming the Scottish Water Identity and Access Management Processes which includes: <br/><br/>Platform replacement of current IDAM solution with a modernised Identity Governance Admin (IGA) Platform <br/><br/>• Replacement of Microsoft Identity Management (MIM). <br/><br/>• Refresh of supporting orchestration engine – e.g. Entra ID. <br/><br/>• Improved audit and reporting capabilities on the Joiners, Movers, Leavers (JML) and Risk Management processes for access management. <br/><br/>• Capabilities to enable automated Role Based Access Controls with third party applications, e.g. Entra Id, Oracle, WorkDay with the potential for deployment into Scottish Water to be considered with the potential for deployment into Scottish Water via recognised integration approaches (e.g. Connextors/APIs) <br/><br/>• Consistent user experience (internally and for third-parties) so they can view permissions and access rights. <br/><br/>• Decommissioning of existing Identity and Access Management Technologies. <br/> <br/><br/>Deployment into Scottish Water <br/><br/>• Manage the End-to-End delivery and transition to the new IDAM solution to support the technology and process changes required for the SW strategy (including Design, Development, Configuration and Data Management). <br/>• Manage the required integration to Input (e.g. HR or ServiceNow) systems or Output systems (e.g. Directories or Applications). <br/>• Management of all required decommissioning. <br/>• End to End test management and test activities for the new IDAM processes. <br/>• The IGA tool must provide functionality to help Scottish Water leverage analytics to detect and respond to anomalous access patterns or potential security risk. <br/>• Ownership and completion of all relevant deliverables to support the Scottish Water internal change governance and framework, including stakeholder management. <br/>• Delivery of communications and training as agreed appropriate with Scottish Water. Evidence of existing training already incorporated with vendors own solution. <br/><br/> <br/>Policy, Support and Maintenance <br/><br/>• Compliance with all relevant data, identity and access policies and regulations such as UK DPA & General Data Protection Regulation (GDPR). <br/>• Consistent policies across Scottish Water for on-premises and hosted (cloud) services. <br/>• Ownership and completion of all relevant governance deliverables in line with Scottish Water Digital Change framework. <br/>• Evidence of vendor supportability, timelines and service management criteria. <br/> <br/><br/>Business Process Optimisation <br/><br/>• Analysis of processes and tools for managing digital identity lifecycle for Employees, and third parties (e.g. Delivery Partners, Contractors and supply chain orgs) and have the capabilities to manage machine identities. <br/>• The IGA tool should have the capabilities to connect Business to Business and Business to Customer. <br/>• Tools and supporting processes to manage the user lifecycle from provisioning through to de-provisioning of accounts and access rights, authentication & applications. <br/>• Increased automation, efficiency and speed of JML process. <br/>• Full audit and reporting capabilities on the JML and Risk Management processes for access management. <br/>• Development of Role Based Access Control optimisation and appropriate Risk Management and Security checks in the processes. <br/><br/>The solution must be able to support all Scottish Water employees and third-party identities– mapping of these requirements is required (includes Europe (EU) and other offshore locations). <br/><br/>Data storage must follow Scottish Water policies on geographical requirements. <br/><br/>Although remote working is likely, where face to face collaboration is necessary, it is expected Scottish Water’s principal office at The Bridge, 6 Buchanan Gate, Glasgow G33 6FB will be deemed the project base address, and any travel or associated cost would be absorbed by the vendor and not Scottish Water. Additional information: https://atamis-scottishwater.my.salesforce-sites.com/ProSpend__CS_PublicLandingPage?SearchType=Projects