Dobava in vzpostavitev sistema za večnivojsko avtentikacijo

The contract timeline indicates that individual licenses are valid for at least 5 years from their acceptance date. The initial phase of the contract, which includes the delivery of 250 licenses and 50 hardware authentication tokens, along with the services for implementing the multi-factor authentication system, has a deadline of six (6) months from the date the contract is mutually signed. For any additional deliveries of licenses or hardware authentication tokens, the delivery period will be determined on an as-needed basis. The document does not explicitly state a contract start date, end date, or overall total duration for the entire contract.

The core scope of work for this tender is the supply and establishment of a multi-level authentication (MFA) system. Initially, this includes the delivery of 250 licenses and 50 hardware authentication tokens, along with a one-time scope of services required for the system's establishment and implementation. The tender also anticipates the potential for additional deliveries of up to 750 licenses and 450 hardware authentication tokens, based on future needs and financial resources.

The high-level summary of the Statement of Work and core deliverables includes:

• Delivery of equipment and licenses to the client's premises.
• Preparation of an implementation plan (HLD/LLD) and a phased migration/rollout plan (pilot to production) with a timeline.
• Establishment of the MFA environment.
• Integration with the user directory and synchronization of users and groups.
• Definition and preparation of user groups for various authentication methods (pilot, privileged, hardware token, mobile).
• Configuration of authentication policies based on user groups, applications, locations/networks, and access types.
• Configuration of MFA exceptions for critical processes and devices, including "trusted device/network" rules and audit trails.
• Activation and setup of MFA methods such as mobile application (push), OTP (TOTP/HOTP), and hardware authentication tokens.
• Establishment of administrative rules for token management (issuance, replacement, revocation) and backup procedures.
• Integration of MFA for remote access (VPN, RDP/SSH) and with Cisco systems for AAA scenarios and NAC policy alignment.
• Integration of MFA for web and business applications using protocols like SAML/OIDC/OAuth.
• Preparation of procedures for user onboarding (self-enrollment, guided, hardware token users) and operational procedures for common issues like lost devices or temporary access.
• Development of short instructions for end-users and helpdesk personnel.
• Functional testing based on scenarios for different user types and MFA exceptions.
• Testing of integrations with SSO/federation, applications, VPN/AAA, and Cisco ISE.
• Preparation of comprehensive documentation, including architectural descriptions, integration lists, policy descriptions, authentication methods, helpdesk and administrative procedures, and basic troubleshooting guides.
• Ensuring manufacturer's maintenance for software licenses and guaranteeing that the software functions according to technical specifications and agreed functionalities.