administrators) via identity management interface Support dynamic delegation to specific identity administrators based on a user’s attribute values (cost center, job code, etc.) Y/N Support delegation by identity administrator to another person for a specific period of time Y/N Support for reminders to identity administrators who are required to perform workflow tasks Y/N Support for n-level delegation (please specify n) Y/N Allow self-service to read specific attributes in their profile, while preventing others from doing so Y/N self to update specific attributes in their profile, while preventing others from doing so Y/N Support self-registration security requests for specific services Y/N C.3 Resource Provisioning – Auditing and Reporting Support out-of-the-box reports (please specify) Y/N Support scheduled report generation Y/N Support for email-based report subscriptions / notifications Y/N Provide a built-in query tool for ad-hoc reporting Y/N Support configuration of security audit levels and audit information collected Y/N Support an ODBC-compliant database as the audit repository Y/N Support user maintenance auditing (identity updates, password changes, etc.) Y/N Support for historical reporting (e.g., John Doe had access to resources at this point in time) Y/N Support for integration with other reporting engines, list what you support. Y/N and Essay
Describe the integration between the proposed auditing solution and the other IAM components that comprise your solution Essay Describe the manner in which the auditing solution correlates events to a particular identity even if the name of the object representing that identity has changed Essay Describe how events in the auditing engine are correlated to actions performed by the Identity Management solution Essay Describe how the auditing solution is able to detect changes made outside of the provisioning events of the Identity Management solution Essay Describe the systems, applications, and protocols that the Auditing solution is able to interact with and the nature of that interaction Please list any applications, databases, or directory services that the proposed Identity Management system is able to integrate with that are not addressed by the Auditing solution Essay Describe the “dashboard” interface that can be used to quickly identify important events detected by the Auditing engine Essay Describe what customizations are available to the Auditing engine for customized reporting and dashboards Essay C.4 Resource Provisioning – Rules Engine Support for approval-based rules can trigger external program calls (e.g., runnable scripts such as VBScript, Jscript and REXX scripts) on all target systems Y/N Rules engine exposed by API, preferably web-services-based Y/N Describe what scripting or programming languages are supported for the creation and customization of Identity Management rules Essay Please describe in what scripting or programming languages are supported for the creation and customization of user Essay
Do you provide access to native English-speaking support representatives 24x7x365? If not please describe what hours native English-speaking representatives are available. Essay Describe the support your proposal provides for customer-made customizations Essay Implementation Plan, Methodology and Approach Answer Please Describe Experience and/or Provide Comments Please answer each of the questions/requirements for the below categories. (Any additional information believed to be relevant with respect to the question’s topic may be included in the answer.) Selection Control Implementation Completion Describe your typical recommended standard approach for an IAM architecture. Essay Describe the milestones for the approach described to include the person-hour metrics for both GPAA and system integrator resources required to achieve them, as well as, total expected calendar duration. Essay Do you require that we use your consulting services for implementation of all elements of the IAM architecture as described? If so, to what extent? Essay Describe the ideal project team’s (Contractor’s) composition, skills and organization. Include estimates of the required time commitment for each team member, such as fulltime, part-time, 50%, etc. Do you use one consistent project management process or methodology or do you tailor your project management process to the project at hand? Cite examples to illustrate your approach and reasons why you believe in it. Essay What is the largest install base for users, remote sites and PC’s for the application? Essay What types of quality control measures do you use? Essay Please describe this environment in detail. Essay How do you monitor progress and account for variances in schedule and budget? Essay
List the audiences addressed in the Communication Plan. List For each audience of the Communication Plan, please describe the most likely topics that will be of interest. List Essay Describe how the effectiveness of the Communication Plan will be evaluated throughout the implementation. Essay Describe previous experiences integrating custom applications within an IAM system. Essay Describe previous experience in designing custom workflows and policy definition for IAM workflows. Essay Do you have experience in integrating new IAM systems with existing IAM systems, running in parallel? Please describe. Essay Do you have experience in designing and implementing parallel directory environments for transitional purposes. Please describe. Essay What method do you use to formulate, execute and evaluate a comprehensive test plan to ensure that all development is complete and functional? Essay What type and how much training do you provide? Essay How do you manage the transition from the test environment to the production environment? Essay What support do you provide after implementation to adjust for problems and correct errors as a result of inadequate control? Essay What procedure do you use to obtain final approvals from corporate management and to formally end the project? Testing Experience Answer Please Describe Experience and/or Provide Comments GPAA requires a number of environments in which to fully vet the software development lifecycle process (SDLC) of the IAM components. The below environments are representative of the types of function and activity that will be performed throughout the SDLC. a) Development Environment b) QA Testing Environment c) Pre-Production d) Production