Brief
The University of Heidelberg is seeking to establish a framework agreement for services in the area of Identity and Access Management (IAM). The goal of this agreement is to engage a qualified service provider to design, implement, customize, and further develop a unified, cross-site, IT-supported solution for managing digital identities and their permissions. The scope of work is divided into the following areas: - Part A: Framework agreement for customizing open-source software - Part B: Framework agreement for development services - Part C: Framework agreement for maintenance services The implementation will be based on the open-source software MidPoint from Evolveum s.r.o. and aims to enable the automated maintenance, distribution, and management of user accounts, groups, roles, and permissions within the university's IT system landscape. By introducing a central IAM solution, the university aims to significantly increase efficiency, transparency, and security in user management while sustainably meeting IT governance, data protection, and compliance requirements. The framework agreement specifically includes the following services: - Implementation, configuration, and customization of the IAM software MidPoint - Integration of relevant source and target systems - Modeling of business rules and processes - Migration of existing data and replacement of existing systems - Provision of a self-service portal for decentralized IT representatives and administrators - Project management, documentation, and conducting training and knowledge transfer. Part A - Framework agreement for customizing open-source software This part includes the initial implementation and customization of the open-source software MidPoint to meet the technical and organizational requirements of the University of Heidelberg. This includes setting up the system environment, customizing basic modules and interfaces, integrating relevant source and target systems, and creating the necessary technical and operational documentation. The goal is to provide a functional IAM base platform as a foundation for further expansion within the development and maintenance services. Part B - Framework agreement for development services The further expansion refers to the enhancement and further development of the Identity and Access Management at the University of Heidelberg based on the open-source software MidPoint (Evolveum s.r.o.). This service area forms Part B of the framework agreement and includes the provision of development and implementation services, particularly for introducing new functions, customizing existing modules, and continuously optimizing the technical and procedural components of the IAM solution. This includes, among other things: - Process consulting, implementation of new use cases, and support in ongoing operations - Creation of migration concepts, migration of LDAP systems, development of data and role concepts, and consulting on joiner-mover-leaver processes - Expansion of the user interface with additional functions and processes. The services mentioned are not exhaustive; they serve as an exemplary description of the possible development and customization tasks within Part B. These services can be requested as needed after the first six months within the framework agreement. The specific requests will depend on the respective needs and relate to services in the described area of Identity and Access Management. Part C - Framework agreement for maintenance services Part C of the framework agreement includes the ongoing maintenance and support of the IAM solution implemented based on MidPoint. The goal is to ensure stable and continuously functional operations, as well as the implementation of updates, bug fixes, and security-related adjustments. The commissioning of individual services from the above-described Parts A, B, and C of the framework agreement will be demand-based and project-dependent by the client under the applicable contract conditions. The University of Heidelberg places particular emphasis on close collaboration with the contractor to establish a future-proof, scalable, and maintainable solution that meets the complex requirements of a modern research and educational institution. For the initial contract period of six months, an order volume of approximately 200 person-days is estimated. In the following contract years, it is planned to call off or commission a volume of up to 200 person-days per contract year. The mentioned figures are for orientation and planning purposes and do not represent a binding acceptance obligation or minimum purchase quantity. For the duration of 42 months, an estimated order volume of approximately 1,280,000 EUR (net) is assumed. The client reserves the right to optionally increase the estimated order volume by up to 50% to 1,920,000 EUR net. This means that the framework agreement will end once the maximum order volume is reached or upon expiration of the agreed contract term of 42 months, whichever occurs first. The stated values are for orientation and planning purposes and do not represent a binding acceptance obligation.
