Supply, implementation, and managed services for identity and access management (idam) system

ATNS is a State-Owned Company (SOC) providing air traffic management, communication, surveillance, navigation, and training services. It manages 10% of the world’s airspace and operates across 21 aerodromes in South Africa, including OR Tambo, Cape Town, and King Shaka International. ATNS supports VSAT networks across 33 African states. The purpose of this tender is to appoint a service provider to supply, implement, and provide support, maintenance, and managed services for an Identity and Access Management (IDAM) system for five years. The IDAM solution must integrate with ATNS applications, support authentication protocols (SAML, OAuth, OpenID), enable SSO, MFA, role-based access control, and customisable reporting.

Compulsory briefing session: 07 July 2026 at 14h30 CAT (MS Teams). Clarification deadline: 23 July 2026 at 17h00 CAT. Closing date and time: 30 July 2026 at 11h00 CAT. Proposals must remain valid for 120 days from submission.

Technical and bidding enquiries: Light Gqabhu, Email: [email protected] (cc: [email protected]). Physical submission address: ATNS Company Limited, Eastgate Office Park, Block C, South Boulevard Road, Bruma, 2298.

Submission must be made either online via the e-Submission (e-Tender) system or physically. Physical submissions must include one original, one copy, and one PDF version on USB, delivered to: ATNS Company Limited, Eastgate Office Park, Block C, South Boulevard Road, Bruma, 2298. The bid must be structured in three parcels: Parcel A (Administrative and Mandatory), Parcel B (Technical Proposal), and Parcel C (Price and ATNS Specific Goals). Required forms include SBD 3.3 (Pricing Schedule) and SBD 6.1 (Preference Points Claim Form). Attendance at the compulsory briefing session on 07 July 2026 at 14h30 via MS Teams (Meeting ID: 350 394 713 818 022, Password: dw9m4Qw6) is mandatory. Queries must be submitted using the Form of Questionnaire (APPENDIX A) by 23 July 2026 at 17h00 CAT to [email protected] (cc: [email protected]).

The IDAM solution must: integrate with ATNS applications for account provisioning/de-provisioning; support authentication protocols (SAML, OAuth, OpenID); enable single sign-on (SSO); support multifactor authentication (MFA) per user, role, or group; manage roles, groups, and permissions flexibly; configure user session controls; provide self-service functions (e.g., password resets); include workflow approvals for provisioning/de-provisioning; and generate high-level, detailed, and customisable operational reports. The solution must also support automated session timeout, configurable session lifetime, re-authentication enforcement, and single logout across systems.

Bidders must provide as-built implementation documentation and ATNS-specific manuals (in English) with online help screenshots or links. User Acceptance Testing (UAT) requires a sample testing plan and sign-off documentation. The minimum qualifying threshold for functionality is 80/100 points. Bidders must address all evaluation criteria comprehensively, with detailed supporting evidence (e.g., screenshots, documentation references). Failure to meet the minimum score in any criterion results in exclusion from further evaluation.

Submit a completed and signed SBD 3.3 (Pricing Schedule) with all applicable taxes included. The pricing schedule must cover once-off costs (e.g., software supply, implementation, integration with ATNS applications, SSO configuration, MFA setup) and ongoing costs (support, maintenance, managed services). Omissions in the pricing schedule may result in the bid being deemed non-responsive. The pricing must align with the scope of work and be fair and reasonable.

Submit a completed and signed SBD 3.3 (Pricing Schedule) with all costs included. The pricing must cover once-off costs (software supply, implementation, integration) and ongoing costs (support, maintenance, managed services). Bids without a price or with incomplete pricing will be deemed non-responsive. The 80/20 point system applies to tenders up to R50,000,000 (all taxes included). Price points are calculated using the formula: Ps = 80(1 - (Pt - Pmin)/Pmin), where Ps is the score, Pt is the tender price, and Pmin is the lowest acceptable tender price.

Mandatory compliance requirements: Valid SARS Tax Compliance Status (TCS) PIN, valid for the full bid validity period. Registration on the Central Supplier Database (CSD) is compulsory; submit proof of registration or application. B-BBEE Certificate or Sworn Affidavit (for EMEs/QSEs) required. For preference points: 51% Black Owned (10 points) or 30% Black Woman Owned (10 points) suppliers must submit CSD Report, CIPC documents, shareholder certificates, ID copies of shareholders, and B-BBEE Certificate. OEMs must provide confirmation of warranty and maintenance support for five years; resellers/distributors must submit an OEM authorisation letter detailing scope, maintenance, warranty, and after-sales support. Three reference letters from enterprise clients (completed within the past 5 years) are required.

ATNS is committed to economic, social, and environmental sustainability as part of its mission.

The contract includes standard clauses such as retention for non-satisfactory completion, breach of contract, and confidentiality. ATNS reserves the right to vary the scope, reject any or all bids, or withdraw from commitments. The successful tenderer must accept the General Conditions of Contract, including professional indemnity insurance requirements. All designs and documentation submitted will be treated as confidential. Contract amendments must be in writing and signed by both parties. ATNS may cancel the procurement process at any stage before contract award. Non-compliance with delivery terms must be reported immediately to ATNS.

Evaluation is conducted in five stages: Stage 1 (Administrative Requirements), Stage 2 (Mandatory Requirements), Stage 3 (Technical Evaluation), Stage 4 (System Demonstration), and Stage 5 (Price and Preference Points). Stage 3 evaluates technical compliance across categories like identity provisioning, authentication, authorisation, session management, and reporting. Each requirement must be demonstrated with screenshots or documentation. Stage 4 requires a live demonstration of system capabilities, with 100% compliance needed to proceed. Stage 5 uses the 80/20 point system, with 80 points for price and 20 for preference goals (e.g., B-BBEE ownership). The minimum technical threshold is 80/100 points.