RFI for Saas Identity and Access Management System

The North Carolina Administrative Office of the Courts (NCAOC) is seeking information from vendors to replace its existing Identity and Access Management (IAM) solution, IDWeb. The primary business driver for this effort is that the underlying platform, Microsoft Identity Manager (MIM), will reach end-of-life in 2029. The NCAOC is looking for a SaaS-based IAM solution that can support its 7,000 employees and provide features such as strong AD and hybrid identity support, HR-driven identity, access governance, self-service capabilities, security and compliance, workflow and automation, application integration, scalability and reliability, reporting and visibility, administrative simplicity, and core identity lifecycle management. • The solution should have deep integration with Active Directory and support for syncing identities across multiple authoritative sources. • The solution should have the ability to use HR or personnel systems as the source of truth and automate updates when users change roles, locations, or departments. • The solution should have access reviews and recertifications, role mining/role modeling, separation of duties controls, and approval workflows for elevated or non-standard access. • The solution should have self-service password reset, self-service group or access requests, manager-based approvals, and delegated administration for limited support functions. • The solution should have MFA integration, least privilege support, privileged access workflow integration, detailed logging and reporting, and support for compliance and audit requirements. • The solution should have a flexible workflow engine, low-code or configurable process design, event-driven automation, and ability to integrate with ticketing systems and existing operational processes. • The solution should have prebuilt connectors for common enterprise systems, APIs for custom integrations, support for legacy applications, and file/database/API-based integration options. • The solution should be able to support the full user population and growth, have high availability options, disaster recovery support, and vendor support maturity and product roadmap stability. • The solution should have easy reporting for auditors and leadership, dashboards for provisioning status, failures, orphaned accounts, and certification results, and clear visibility into manual exceptions. • The solution should be easier to manage than MIM, have reduced dependency on niche skill sets, better documentation and vendor support, and lower operational overhead for day-to-day administration. • The solution should have joiner, mover, leaver automation, automated provisioning and deprovisioning, role and attribute-based access assignment, group management, and birthright access based on job function or department. • The solution should be cloud-native or hybrid and have a reasonable migration path from MIM without major disruption.