Oracle identity access management (iam) and enterprise content management (ecm) services

Closing date: 4 September 2026 at 11:00 AM.

Non-compulsory online briefing session: 24 August 2026 at 10:00 AM via Microsoft Teams (credentials in the RFP).

Deadline for written clarification enquiries: 28 August 2026.

Clarification responses published on the National Treasury eTender Portal: 1 September 2026.

Non-Compulsory Online Briefing Session: 24 August at 10h00 AM. Join via Microsoft Teams (https://teams.microsoft.com/meet/329696055220803?p=9xfakaLTjjBPLB33QE), Meeting ID: 329 696 055 220 803, Passcode: hX7fs3Dw.

Tender clarification enquiries in writing to [email protected] (by 28 August 2026).

eTender submission support: National Treasury at +27 (0)12 406 9222 or [email protected].

No named individual contacts are provided.

Submit the complete bid electronically via the National Treasury eTender Portal at www.etenders.gov.za.

No physical, hand-delivered, emailed or courier submissions will be accepted.

The eTender Portal automatically prevents late uploads after the closing time; the bidder is responsible for ensuring a successful upload before the deadline.

Upload the Pricing Schedule (SBD 3.3) as a separate electronic file clearly labelled "Pricing Schedule (SBD 3.3)".

Complete and sign all required returnable forms: SBD 1 (Invitation to Bid), SBD 4 (Declaration of Interest), SBD 6.1 (Specific Goals Declaration), the Pricing Schedule (SBD 3.3), the Company Experience Template, CVs of the proposed service delivery team, and reference letters.

An incomplete, unsigned or partially signed pricing schedule — including any missing initials or blank fields — will be deemed non-compliant and result in automatic disqualification.

Bidders who do not submit the requested documents may be allowed up to 2 working days to provide them; failure renders the bid unacceptable and liable to disqualification.

Tender Submission: Tenders should be uploaded on the e-Tender portal (www.etenders.gov.za). No physical or emailed submissions will be accepted. Bidders must submit their complete bid electronically via the National Treasury eTender Portal. No physical submissions, hand-delivered documents, or courier deliveries will be accepted. Late submissions cannot be uploaded after the closing date and time; the eTender Portal will automatically prevent late uploads. Bidders are responsible for ensuring successful electronic upload before the closing time. The GPAA requires that the Pricing Schedule (SBD 3.3) be uploaded separately on the eTender system and clearly labelled as such. All company details must be entered correctly in the fields provided on the eTender portal. Company Experience Template must be completed listing clients, duration, value, service rendered, and contactable reference details.

Evaluation follows four phases: Phase 1 Mandatory Technical Criteria, Phase 2 Rated Criteria, Phase 3 Administrative Compliance, and Phase 4 Price and Preference Evaluation. A bidder who fails any preceding phase is disqualified.

Phase 1 (pass/fail): Bidders must be accredited on SITA RFB 1183 (Business Solution Delivery Services) and be accredited in Gauteng. Bids must be submitted by the closing time.

Phase 2 (Rated Criteria, total 100 points; minimum qualifying score is 70):

1. Company experience in Oracle services in a pension administration environment (10 points): provide a template listing clients from the last 10 years with project duration, value, services rendered and contactable references; bidder must be an Oracle certified partner. Scoring: <1 yr = 0; 1-3 yrs = 4; 3-5 yrs = 6; 5-8 yrs = 8; >8 yrs = 10.
2. Work Plan / Implementation Plan / Methodology (25 points): must include a detailed methodology, governance model, escalation matrix, reporting requirements and a risk management plan; points awarded incrementally (0/10/15/20/25) for increasing completeness.
3. Experience of the service delivery team (60 points): submit 3 CVs demonstrating relevant experience. Scoring per role: WebLogic/OSB/SOA specialist, WebCenter Content Implementation specialist, and Oracle IAM specialist, each with experience bands worth up to 20 points.
4. References (5 points): submit contactable reference letters for similar services; 0 letters = 0, 1 = 1, 2 = 2, 3 = 3, 4+ = 5.

Phase 3 (Administrative Compliance): SBD 1 and SBD 4 must be fully completed; bidder must be registered on the CSD and not restricted from doing business with the state. Missing documents may be provided within 2 working days.

Phase 4 (Price and Preference): the 80/20 preference system applies — 80 points for price, 20 points for specific goals as per PPR2022 and the GPAA Preferential Procurement Policy.

Scope: Provide Oracle Identity Access Management (IAM) and Enterprise Content Management (ECM) services, including business-as-usual support, maintenance, DevOps, architecture integration, source code management, documentation, reporting, and new project implementation.

IAM: continue the current IAM implementation to link applications that use separate user credentials, enforcing single sign-on.

ECM: replace the legacy PEKWA scanning and indexing system with an Oracle WebCenter Content (WCC) solution integrated with the existing Oracle ECM platform; support folders/folios, workflows, content type management, format conversion and retention schedules.

Deliverables: software design, functional source code (HTML, CSS, TypeScript, configuration files) and installation instructions; code deliverables updated regularly on the GPAA's GIT instance; implementation must comply with the GPAA Business Requirements Specification.

BAU activities: investigate and resolve network/connection issues, patching and software updates, SR analysis, issue reproduction support, constructing reproducible test cases, guidance on Oracle support recommendations, pre-production testing, advice on Oracle support tools, notification of Oracle alerts/patches, design and installation of Oracle middleware components, and WebLogic 12 to 14 upgrade/migration.

Required expertise: WebLogic specialist and Oracle Service Bus (OSB), Service Oriented Architecture, WebCenter Content implementation, and Oracle IAM. Resources must be Oracle certified or hold an IT degree with relevant experience.

Location: onsite at the GPAA Head Office, Arcadia, Pretoria, unless alternative arrangements are approved in writing.

1. Purpose of the request for proposal .................................................................. 3

2. Introduction and background ................................................................................... 3

3. Scope of work .................................................................................................................. 5

4. Duration .............................................................................................................................. 7

5. Location .............................................................................................................................. 8

6. Project management methodology ......................................................................... 8

7. Project performance outcomes and measures ................................................. 8

8. Submission instructions ............................................................................................... 9

9. Pricing .................................................................................................................................. 9

10. Overall evaluation process..................................................................................... 10

11. Due diligence ................................................................................................................... 15

12. Vetting of the bidder ................................................................................................... 15

13. Pricing schedule ........................................................................................................... 15

14. Company experience template ................................................................................. 15

15. Standard supply chain management documents .............................................. 15

RFP gpaa 05/2026

Oracle IAM and ECM Services of 56

8.1 Phased system implementation approach with clearly articulated milestones, deliverables,

activities, and timelines.

8.2 Robust change management plan, communication, and user training.

8.3 System development and deployment.

8.4 Project implementation team comprising of GPAA representatives, ICT.

Less than one (1) year 0 Points

More than one (1) years, up to three (3) years 4 Points

More than three (3) years, up to five (5) years 6 Points

More than five (5) years, up to eight (8) years 8 Points

More than eight (8) years 10 Points

2. Work Plan / Implementation Plan / Methodology 25

• A detailed methodology how the Bidder will deliver on the services that are

covered under the Scope of Work.

• A Governance model and Escalation matrix that will be applicable to this

service.

No methodology/governance/escalation matrix provided by 0 Points

the Bidder

The Bidder provided a methodology on how to deliver the 10 Points

recurring services and the project related services that will

be applicable to this service.

The Bidder provided a methodology on how to deliver the 15 Points

following that will be applicable to this service:

• Recurring services and the project related services,

• Governance model, and

RFP gpaa 05/2026

Oracle IAM and ECM Services of 56

• Escalation matrix.

The Bidder provided a methodology to deliver the following 20 Points

that will be applicable to this service:

• Recurring services and the project related services,

• Governance model,

• Escalation matrix, and

• Reporting requirements to manage service delivery and

management of delivery failure.

The Bidder provided a methodology to deliver the following 25 Points

that will be applicable to this service:

• Recurring services and the project related services,

• Governance model,

• Escalation matrix,

• Reporting requirements to manage service delivery and

management of delivery failure, and

• A detailed risk management plan.

3. Experience of the service delivery team 60 Points

Regulations, 2022 (PPR2022) and the GPAA Preferential Procurement Policy.

The 80/20 Preference System will be used for this tender, where a maximum of 80 points is allocated to

price and a maximum of 20 points allocated for specific goals as per the PPR2022.

The relevant formula for scoring price points and the methodology for scoring preference points (specific

goals) is documented in the SBD6.1. Bidders must ensure that they complete the SBD6.1 to claim points

for specific goals. Bidders that do not submit the correctly completed SBD6.1 with the original bid

submission will not score points for specific goals. An incomplete, unsigned, or partially signed pricing

schedule — including any missing initials or any field left blank where information, signatures, or initials

are required — will be deemed non‐compliant and will result in automatic disqualification.

1.1 The purpose is of this Request for Proposal (RFP) is to invite proposals from suitably and

experienced service providers to provide Oracle Identity Access Management (IAM) and Enterprise

Content Management (ECM) services as described in the Scope of Work below.

1.2 This RFP will ensure that the GPAA receives a comprehensive service aligned with the deliverables

and scope as specified below.

deliver on the service:

• Web Logic Specialist and Oracle Service Bus (OSB) and Service Oriented architecture.
• WebCenter Content implementation.
• Oracle Identity and Access Management (IAM).
• Resources must be oracle certified or have a IT degree with relevant experience in installing

and amending oracle products according to GPAA’s requirements.

skills sets and attributes, and experience on the following:

1. Company Experience in provision of Oracle services in pension 10 Points

administration environment

The bidder must complete the template (refer to 12.1.1 below) listing all their clients

where Oracle product installation services were rendered in the last ten (10) years:

• The name of the company.
• The duration or period (in months) when the project(s) were undertaken.
• The bidder must be an Oracle certified partner
• The value (amount in Rands) of the projects.
• Specific service that was rendered.
• Contactable reference details of the client.

Disclaimer: Failure to provide this information will result in the bidder forfeiting points.

comprehensively demonstrate strong and relevant experience in terms of the services

required.

delivery team to deliver on the service.

Note: CVs demonstrate qualifications and years of experience in the relevant field.

No letter(s) 0 Points

One (1) letter 1 Points

Two (2) letters 2 Points

Three (3) letters 3 Points

Four (4) or more letters 5 Points

Total Points 100

Note: The minimum qualifying score for functionality is seventy (70) points. A bidder who fails to meet

the minimum qualifying score will not be considered for the subsequent phases of evaluation.

12.2.1 Company Experience Template

Disclaimer: Failure to provide this information will result in forfeiting points.

Pricing must be submitted on the prescribed SBD 3.3 Pricing Schedule, completed electronically on the shaded rows, printed, signed, and uploaded as a separate file labelled "Pricing Schedule (SBD 3.3)".

An incomplete, unsigned or partially signed pricing schedule — including missing initials or blank fields — will result in automatic disqualification.

Only the financial proposals of bidders who pass the preceding evaluation phases will be evaluated.

Tender validity: 120 days.

The 80/20 preference point system applies: 80 points for price, 20 points for specific goals.

CSD: bidder must be registered on the Central Supplier Database, and no director may be restricted from doing business with the state.

Tax Compliance: submit a SARS Tax Compliance Status (TCS) PIN or a CSD number. Consortia/joint ventures/sub-contractors must each provide a separate TCS PIN or CSD number.

SBD 1 (Invitation to Bid) and SBD 4 (Declaration of Interest) must be completed in full.

SBD 6.1 (Specific Goals Declaration) must be completed to claim preference points; failure to submit it correctly with the bid means no points for specific goals.

Mandatory SITA RFB 1183 accreditation in Gauteng for Business Solution Delivery Services.

No bid will be considered from persons in the service of the state, or companies/close corporations with directors/members in the service of the state.

Proof of authority to sign (e.g., company resolution) must be submitted.

Phase 4 – Price and Preference Evaluation: Only qualifying bidders will be evaluated on price and preference as per the Preferential Procurement Regulations, 2022 (PPR2022) and the GPAA Preferential Procurement Policy. The 80/20 Preference System will be used for this tender, where a maximum of 80 points is allocated to price and a maximum of 20 points allocated for specific goals as per the PPR2022.

Specific Goals applicable to this bid (out of 20 for 80/20 system): % African ownership (100% of max points); % Coloured ownership (80% of max points, 10 max for 80/20); % Indian ownership (50% of max points); % women owned (5 max for 80/20); % youth owned (5 max for 80/20). Points claimed calculations: For ownership, points are calculated by multiplying the race weighting % by the maximum points for that goal by the % ownership by the race. For locality, the points claimed will be the maximum points if the bidder declares Proof of Locality at the time of declaration. Subcontracting will be treated as a condition of contract and not a condition of tender.

[email protected]

• The closing date for the submission of written clarification enquiries is 28 August

• Responses to all clarification questions will be published on the National Treasury

eTender Portal on 1 September 2026.

historically disadvantaged by unfair discrimination on the basis of race, gender and

disability including the implementation of programmes of the Reconstruction and

Development Programme as published in Government Gazette No. 16085 dated

23 November 1994.

2.1.21 “tender for income-generating contracts” means a written offer in the form

determined by an organ of state in response to an invitation for the origination of

income-generating contracts through any method envisaged in legislation that will

result in a legal agreement between the organ of state and a third party that

produces revenue for the organ of state, and includes, but is not limited to, leasing

and disposal of assets and concession contracts, excluding direct sales and

disposal of assets through public auctions

2.1.22 “Youth” means persons between the ages of 14 and 35 as defined in the National

Youth Commission Act of 1996.

the bidder may score low points for experience.

Disclaimer: Should the proposed CVs no longer be available at the time of award of

the tender, the same calibre of CVs must be proposed for the bidder to remain an

acceptable bidder. Non-compliance may lead to disqualification/termination of a

contract.

A – Web Logic Specialist and Oracle Service Bus (OSB) and Service Oriented

architecture specialist

of compliance based on misrepresentations of facts, whether made by the party

claiming compliance or by any other person.

2.1.10 “Indian” means people identified by the Department of Home Affairs assigned to

the Indian ethnic group, and who are citizens of the Republic of South Africa by

birth or descent; or who became citizens of the Republic of South Africa by

naturalisation before 27 April 1994; or on or after 27 April 1994 and who would have

been entitled to acquire citizenship by naturalisation prior to that date. Generally

considered to be people of South Asian descent.

2.1.11 “Locality” means that the enterprise has either its head office or an operational

office located in that location AND they are in procession of proof of locality.

2.1.12 “Ownership” includes exercisable voting rights in the enterprise; economic interest

in the enterprise (including Employee Share Ownership Programmes, Broad-based

Ownership Schemes). The definition in the Ownership Element of the B-BBEE

Amendment Act of 2013 and the codes of good practice provides more information

on ownership.

2.1.13 “Proof of Disability” means:

2.1.13.1 A completed SARS “Confirmation of Diagnosis of Disability” form endorsed by a duly

registered medical practitioner which will remain valid for 10 years where the disability is of

a permanent nature;

2.1.13.2 A medical report and functional assessment report confirming the disability; or

2.1.13.3 A SASSA disability grant.

2.1.14 “Proof of Locality” means:

2.1.14.1 A municipal rates invoice in the name of the company submitting the bid that has been

issued within the l9ast three months;

2.1.14.2 An affidavit or equivalent from an authorised traditional leaders or local councillor in regions

where municipal rates invoices are not available, showing the township name and ERF

number or physical address;

2.1.14.3 A signed lease with a property owner located in that municipality/township (GPAA may

request a recent statement from the landlord);

2.1.14.4 A utilities rates statement (examples, Eskom or Telkom fixed line service) showing the

physical address and eh company or director name; or

2.1.14.5 A bank statement showing the company name and address.

2.1.15 “Proof of Ownership” means:

2.1.15.1 The percentage (%) ownership indicated on the Central Supplier Database. The CSD

integrates with the systems at Home Affairs (demographic information); Companies and

Intellectual Property Commission (CIPC) (for company information such as shareholding);

and other databases (such as the banks).

RFP gpaa 05/2026

Oracle IAM and ECM Services of 56

2.1.16 “Proof of B-BBEE status level of contributor” means:

2.1.16.1 B-BBEE Status level certificate issued by an authorized body or person (such as a SANAS

verification agent);

2.1.16.2 A sworn affidavit as prescribed by the B-BBEE Codes of Good Practice;

2.1.16.3 A CIPC B-BBEE certificate; or

2.1.16.4 Any other requirement prescribed in terms of the B-BBEE Act.

2.1.17 “price” means an amount of money tendered for goods or services, and includes

all applicable taxes less all unconditional discounts;

2.1.18 “QSE” means a qualifying small business enterprise in terms of a code of good

practice on black economic empowerment issued in terms of section 9 (1) of the

Broad-Based Black Economic Empowerment Act; a QSE has between R10m and

R50m annual revenue, unless specified differently in a sector code.

2.1.19 “Rand value” means the total estimated value of a contract in Rand, calculated at

the time of the tender invitation.

2.1.20 “Specific Goals” means those goals as contemplated in section 2(1)(d) of the

8.1 Name of company/firm...................................................................

8.2 Company registration number: .........................................................

8.3 CSD Number: MAAA...................

8.4 Type of company/ firm

 Partnership/Joint Venture / Consortium  Personal Liability Company

 One-person business/sole propriety  (Pty) Limited

 Close corporation  Non-Profit Company

 Public Company  State Owned Company

 Consortium (Unincorporated JV)  Joint Venture (Incorporated JV)

[Tick applicable box]

8.5 For a consortium or joint venture, the names of each member in the JV/Consortium; together

with the company registration number and corresponding MAAA number, must be detailed

in a separate attachment to the SBD 6.1.

RFP gpaa 05/2026

Oracle IAM and ECM Services of 56

Mandatory Technical Criteria (Phase 1, evaluated on pass/fail basis): (1) Bidders must be accredited on SITA RFB 1183 (as per the applicable category - Business Solution Delivery Services). (2) Bidder must be accredited in Gauteng, in line with the requirements of SITA RFB 1183. (3) Bids must be submitted on or before 4 September 2026 at 11:00am. (4) Bids received after the closing date and time will not be considered.

Administrative Compliance (Phase 3): SBD 1 must be completed in full; SBD 4 must be completed in full; the bidder must be registered on the CSD or any of its directors must not be restricted from doing business with the state. Bidders who do not submit the requested documents will be given a maximum of 2 working/business days to submit; failure will render the bid response unacceptable and result in disqualification.

10. Overall evaluation process..................................................................................... 10

The system provides functionality for both online and batch processing that is required for

The system provides the functionality to scan and index content (using the Oculus Scan and Index

12.4 Phase 4 – Price and Preference Evaluation

Only qualifying bidders will be evaluated on price and preference as per the Preferential Procurement

The 80/20 Preference System will be used for this tender, where a maximum of 80 points is allocated to

price and a maximum of 20 points allocated for specific goals as per the PPR2022.

The relevant formula for scoring price points and the methodology for scoring preference points (specific

goals) is documented in the SBD6.1. Bidders must ensure that they complete the SBD6.1 to claim points

for specific goals. Bidders that do not submit the correctly completed SBD6.1 with the original bid

submission will not score points for specific goals. An incomplete, unsigned, or partially signed pricing

the bid to a bidder that did not score the highest total points (price points plus points for specific goals),

• the 80/20 system for requirements with a Rand value of up to R50,000,000 (all
• The 90/10 system for requirements with a Rand value over R50,000,000 (including all
• Either the 90/10 or 80/20 preference point system will be applicable in this tender. The

1.2 Points for this bid shall be awarded for

1.2.2 Specific goals.

1.3 The points for price and the points for specific goals will be added and subject to section

2(1)(f) of the PPPFA, the award will be to the bidder that scores the highest points.

to mean that points for specific goals are not claimed.

time subsequently, to substantiate any claim in regard to preferences, in any manner required

GPAA and to implement data quality monitoring and management tools until the new capabilities

expanded to provide more functionality and features to the clients of the GPAA.

Number of Letters Points

No letter(s) 0 Points