User management automation solution

The bidder must confirm that neither it nor its management, administrative or supervisory body members, representatives or other controlling persons have been finally convicted within the last five years of participation in a criminal organisation, corruption, fraud, terrorism, money laundering, terrorist financing, trafficking in persons or the use of child labour. The bidder must also have no tax or social security debt, except where permitted by law, and must not be bankrupt, in liquidation, subject to insolvency proceedings, covered by an agreement with creditors, under the control of a liquidator or court, or have its business activities suspended. The bidder must confirm that it has not seriously breached environmental, social or labour-law obligations, committed serious professional misconduct, entered into agreements restricting competition, created a conflict of interest, or participated in the preparation of the procurement in a way that gave it an undue advantage. It must also not have suffered early termination, damages or comparable sanctions because of a serious breach of a previous public contract. The bidder must provide truthful and complete information and submit the required documents. The confirmations also cover unlawful employment of foreign nationals, international sanctions and tax-related offences. Where an exclusion ground applies, the bidder may submit evidence of remedial measures restoring its reliability where permitted by the tender documents.

The bidder’s net turnover must have been at least EUR 150,000 in each of the last two financial years completed before the start of the procurement. At tender submission, it is sufficient to state the turnover in the ESPD, but the bidder must provide a turnover extract for the relevant period if requested by the contracting authority. Within the 60 months preceding the start of the procurement, the bidder must have successfully completed and had accepted by the client at least two similar identity and access management (IAM/IGA) implementation projects. At least one project must have been performed for a public-sector organisation, an essential service provider or a financial institution. The project must have automated user lifecycle processes, including joiners and leavers, from an HR system as the source of truth to target systems such as Active Directory or Microsoft Entra ID, and the implemented environment must have included at least 100 active identities or employees. The bidder must submit a list of contracts including the subject, number of managed identities, a brief description of integrations, the performance period, and the name and contact details of the other contracting party. At least one lead architect or lead consultant must participate in contract performance. This person must have at least three years of experience designing IAM/IGA systems and must have acted as lead architect in the implementation of at least two similar systems meeting the stated requirements. The bidder must provide the employer, employment period and employer contact details, together with descriptions of the two projects. Additional project details may be submitted to obtain extra points under the key-person experience award criterion. The bidder must hold a valid ISO/IEC 27001 information-security certificate or a recognised equivalent, such as E-ITS/ISKE. A copy of the certificate or an independent third-party audit report proving the equivalent certification must be submitted. The tender must include a technical solution concept and implementation plan containing an architectural diagram and an explanation of how the proposed platform fits into the Health Insurance Fund’s hybrid environment, a detailed schedule with milestones for an MVP phase not exceeding six months, and a project risk analysis with mitigation measures for data-exchange failures and the migration period. A completed pricing form must also be submitted. The tender must comply with all tender-document requirements; conditional tenders are not permitted, and any claimed equivalence must be explained and supported by evidence where necessary. For a joint tender, a power of attorney for the authorised representative must be included.