Belgium – Computer-related services – IAM (identiteits- en toegangsbeheer) platform

**Object of the services:** The supply, installation, and maintenance of a Customer IAM (Identity & Access Management). **Comment:** In order to grant its users robust and secure access to the various services, ASTRID is looking for a reliable partner for the supply, implementation, and operation (as a service provider) of a "Customer IAM (Identity & Access Management)" platform capable of operating in a B2B context. This public services contract must include at least the elements that will be briefly outlined below by Post.

**Post 1:** The supply and implementation of a "Customer/B2B Identity & Access Management" platform designed as "State-of-the-Art" to grant users access to all ASTRID applications, and this primarily for three specific use scenarios:

• Provide simplified access (with SSO) to the applications of the ASTRID Dispatching Centre for 101 and 112 operators via an identity federation with their own organisation;

• Provide simplified access (with SSO) for users of the ASTRID platform intended for administrative tasks (Site Portal) via an identity federation with their own organisation;

• Define and configure access processes, procedures, and protocols for the new mission-critical mobile network infrastructure (MCx) that ASTRID will take into operation in the near future.

**Post 2:** Set up and organise the activities related to the introduction of a new user organisation into the "Customer/B2B Identity & Access Management" platform, using identity federation.

**Post 3:** Set up and organise the activities related to the introduction of a new application connector into the "Customer/B2B Identity & Access Management" platform.

**Post 4:** Supply of an infrastructure platform for the Identity and Access Management (IAM) solution that will be used exclusively for this purpose. This platform, which must be fully supplied by the future tenderer, must, after its implementation in the ASTRID Data Centers, also be operated and maintained from this environment as a single integrated platform.

**Rem:** ASTRID already specifies at this stage that, as part of the tender submission during the second phase, after the selection of the candidates, the tenderers must necessarily offer in the inventory of this tender the supply of an infrastructure platform in the ASTRID Data Centers, on pain of absolute nullity of the tender.

**Post 5:** "Managed Services" relating to

• The provision of in-depth technical expertise in Identity & Access Management to map both the existing role models and the new role models within the client organisation(s);

• The management and operation of the new "Customer/B2B Identity & Access Management" platform;

• The development and implementation of new use scenarios, or additional use scenarios, on this platform.

The protection of personal data collected and processed as part of this tender notice must be strictly guaranteed in accordance with the General Data Protection Regulation (Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016) by the various parties.