Published
Gestion des identités et des habilitations (IAM)
Notice number: 26-74673
KEY INFORMATION
- Submission deadline
- • Sep 10, 2026
- Location
- 🇫🇷 France
- Contracting authority
- Coallia
- Accepted Languages
- FRA
- Tender type
- Services
- Contract Value
- Published date
- Jul 28, 2026
TENDER DESCRIPTION
This tender seeks a contractor for the implementation of a modular Identity and Access Management (IAM) solution for Coallia, specifically prioritizing Identity Governance and Administration (IGA) and Privileged Access Management (PAM) modules. The comprehensive scope includes solution provision, integration, configuration, deployment of connectors to diverse target systems (e.g., ADP, Microsoft Active Directory/Entra ID, business applications), testing, acceptance, deployment, training, change management, user support, and ongoing maintenance for approximately 5,200 internal and 100 external identities across 30-40 applications. Key technical requirements include SSO compatibility with Microsoft Entra ID, French user interface, robust API support (REST, SOAP, XML, JSON, CSV, SFTP), high availability (>99.9%), stringent performance metrics, and full RGPD compliance with extensive testing (unit, integration, UAT, performance, security). The contract has an initial firm duration of 12 months, renewable up to 48 months, with a provisional project timeline extending from October 2026 to September 2027, and requires candidates to provide three years of global and field-specific annual…
TENDER BRIEF
The contract timeline is as follows:
- Contract Start Date: The contract will commence on the date of its notification, coupled with the service order initiating the services.
- Total Duration: The contract is initially for a firm period of 12 months from its effective date. It is tacitly renewable three times for successive 12-month periods, with the total duration not exceeding 48 months.
Key milestones and phases are outlined in the provisional planning:
- October 2026 - February 2027: Functional and detailed technical specifications phase.
- November 2026 - June 2027: Specification and flux realization phase.
- February 2027 - June 2027: Realization, integration, and tests phase.
- June 2027 - August 2027: Deployment phase, including the pilot.
- September 2027: Change management, training, and closure phase.
The project phases include:
- Specifications (needs gathering, functional and technical specifications).
- Realization and integration (solution configuration, flux implementation, test preparation).
- Tests and acceptance (technical, functional, and business acceptance tests).
- Deployment (production launch, pilot phase, change management).
- Closure and transfer (administrator training, handover).
Sources
- 1AO_IAM_CCAP_VD.pdf — “COALLIA, couvrant l'historique du projet, les choix structurants, les risques identifiés et les actions en cours sur le périmètre du présent marché. ARTICLE 3 - DURÉE DU MARCHÉ 3.1. Prise d'effet du marché Le marché pren…”
- 2AO_IAM_CCTP.pdf — “sera organisé selon les phases suivantes : Phase de spécifications: Recueil des besoins, spécifications fonctionnelles et techniques. Phase de réalisation et intégration: Paramétrage de la solution, mise en place des flu…”
- SSO (Single Sign-On)
- Active Directory compatibility
- Microsoft Windows environment compatibility (for On-premise or Hybrid solutions)
- Data hosting and technical operations in France or an EU member country (for SaaS solutions)
- Google Chrome browser compatibility (updated versions)
- Microsoft Edge browser compatibility (updated versions)
- Single Sign-On (SSO) Microsoft Entra ID (Azure AD)
- French language for the user interface
- API for data exchange (e.g., REST, SOAP)
- XML format support for data import/export
- JSON format support for data import/export
- CSV format support for data import/export
- SFTP protocol support for data exchange
- Availability rate > 99.9% annually
- Standard response time < 3 seconds for common operations
- Initial solution loading time < 5 seconds
- Scalability to manage simultaneous peaks of activity without performance degradation
- JAVA software (Java 8 update 101 minimum, or open source equivalent) for bid submission
- Mac OS 10.7 (for Java Applet submission on Mac)
- RGPD (Règlement Général sur la Protection des Données) compliance
- Unit tests (with >= 95% success rate)
- Integration tests (with >= 95% success rate)
- User Acceptance Tests (UAT)
- Performance tests
- Security tests
- RACI (Responsible, Accountable, Consulted, Informed) matrix
- Risk analysis (produced at design phase, updated with each evolution)
- Implementation of security rules in development
Sources
- 1AO_IAM_CRT.xlsx — “,,,,,,,,,,,,, ,,,,,,,,,,,,, ,,,,,,,,,,,,, "Equipes/services en charge de la thématique",Questionnaire Technique,,,,,,,,Réponses,,,, ,,,,,,,,,OUI,,,, ,,,,,,,,,NON,,,, ,,,,,,,,,Champs à remplir,,,, ,,,,,,,,,,,,, ,Thème,,N°…”
- 2Règlement de consultation.pdf — “bureautiques) ainsi que sur les conditions techniques d'utilisation, y compris en contexte de mobilité ou de réseau contraint. Évalue également la gestion du cycle de vie de la solution, notamment le versionning, les mod…”
- 3AO_IAM_Annexe_Applications à intégrer.xlsx — “comptes 2. Affectation / révocation de rôles / groupes 3. Révocation automatique à la sortie 4. Désactivation automatique des comptes inactifs 5. Lancement de campagne de revue", ,,,SAGE XRT,Sage,SaaS,18,"1. Création / m…”
- 4AO_IAM_CCTP.pdf — “règles définies, 0 Gestion des accès temporaires à privilèges selon un processus d'approbation et de révocation automatique, Traçabilité des demandes, des attributions et des révocations d'accès à privilèges. 0 En option…”
Login to view all answers and insights
Unlock tender brief for freeTENDER DOCUMENTS
DIRECTORY • 13 FILES
- 5_Clauses_SousTraitanceRGPD.docx68 KBDOCX
- How to Submit Your Bid on the Platform.pdf1.6 MBPDF
- 4_Description_Traitement_DonneesPersonnelles.docx51 KBDOCX
and 6 other documents
Login to view and download all tender documents
Unlock documents for freeASK AI ABOUT THIS TENDER
Can a foreign company apply?
Yes, foreign companies can apply as long as they meet all the requirements set out in the procurement documents.
Login to ask more questions.
Unlock AI tender chat for freeUnlock your tender workflow
Run your first search, evaluate the results, save a daily monitor and start building a pipeline of tenders worth pursuing.