State Of Colorado Governor's Office Of Information Technology

Buyer is seeking information on cloud-hosted Single Sign-On and Multi-Factor Authentication services for constituents. The solution should provide programmatic API access and a robust administrative interface to manage integrations and configurations. Buyer requires enhanced security features including adaptive authentication, step-up verification, and risk-based analysis. This RFI is for planning purposes only to gather information about current market conditions and technology advancements.

• 4/15/2025 - Solicitation Publication
• 4/29/2025 - Pre-proposal Meeting (Virtual)
• 5/1/2025 - Written Inquiry Deadline
• 5/8/2025 - State Response to Written Inquiries
• 5/20/2025 - Proposal Due Date

• Solution must offer integrated identity security service with SSO and MFA
• Partner's employees/contractors must be located in US
• Organization must be located in the United States
• Industry certifications like ISO27001 or NIST compliance
• Proven experience with trusted groups (NIST, GSA, etc.)

• Provide cloud-hosted SSO and MFA services with API access
• Implement role-based access control for user management
• Support OIDC and SAML authentication protocols
• Provide configurable user account self-service interface (WCAG 2.2 compliant)
• Offer adaptive authentication based on user risk analysis
• Implement step-up authentication for high-risk scenarios
• Deliver configurable and searchable event logging capabilities
• Support secure identity verification process through web and mobile interfaces
• Integrate with existing State applications and services
• Provide administrative interface for monitoring and managing configurations