7A21--New AWARD | 36C10B26Q0130 | ID.me Software Subscriptions and Support | VA-26-00012041

Solicitation / RFP / RFQ

This solicitation is for the renewal of the Department of Veterans Affairs (VA) Office of Information Technology's Identity and Access Management (IAM) Credential Service Provider (CSP) Software-as-a-Service (SaaS) solution, specifically the ID.me platform. The VA requires an annual Credential Brokers license and new/renewal user identity proofing subscriptions. The solution is critical for VA's digital modernization strategy, supporting compliance with OMB Memo 19-17 and Executive Orders related to fraud reduction.

• Credential Broker License: Annual license for active and passive broker credentialing, supporting up to 125 million Multi-Factor Authentication (MFA) events per year and 8 million user assignments. Includes integration access for additional agency Relying Parties and Identity Providers, and trust elevation/credential wrapping capabilities.

• Identity Proofing Subscriptions: For new and renewal users, supporting various applications and levels of assurance (LOA3/IAL2).

• Maintenance and Technical Support: Includes software updates, patches, fixes, and help desk support.

• Deliverables: Bi-weekly Snapshot Reports, Monthly Subscription Usage Reports, Service Level Agreement (SLA) Monitoring Plans and Reports, and User Support Reports.

• Security Requirements: Compliance with NIST 800-63 standards (LOA 1, 2, 3; IAL 1, 2; AAL 1, 2, 3), WCAG 2.1 Level A and AA accessibility standards, and VA Critical Security Controls.

• Trusted Referee Support: Remote video chat and in-person identity verification options.

• Contract Type: Firm-Fixed-Price Order.

• Period of Performance: 12-month base period with three 12-month option periods.

• Optional Tasks: Available for increased MFA events and identity proofing subscriptions.

• Submission Method: Via NASA SEWP website or email to specified contacts.

• Submission Deadline: As specified in Block 8 of SF 1449.

• Evaluation Criteria: Award will be based on the lowest-priced, responsive, responsible Offeror whose quote conforms to the requirements. The Government reserves the right to evaluate quotes in the most effective manner and may award without discussions.

• Pricing: Offerors must complete Section B.4, Price Schedule, and submit a quote on an "All or None" basis. All costs must be included in the firm-fixed price.

• This acquisition is set aside for Small Business.

• NAICS Code: 541519, Size Standard: 150 Employees.

• Offerors must provide an OEM letter certifying authorization to sell and provide proposed products.

• Quotes must meet all requirements in Sections B.4 and B.5.

• No assumptions of compatibility will be made by the VA.

• Hyperlinks or embedded attachments in quotes are prohibited.

Solicitation / RFP / RFQ

This is a combined synopsis/solicitation for commercial products or services. The Department of Veterans Affairs (VA), Office of Information & Technology (OIT), Office of the Chief Technology Officer (OCTO) requires the renewal of the Brand Name ID.me Identity and Access Management (IAM) Credential Service Provider (CSP) Software-as-a-Service (SaaS) solution. This includes an annual Credential Brokers license, maintenance support, and help desk assistance for user proofing subscriptions to enable secure authentication into external VA systems.

• Renewal of ID.me CSP SaaS solution.

• Annual Credential Brokers license (up to 125 million Multi-Factor Authentication (MFA) events per period).

• Maintenance support (software updates, patches, fixes).

• Help desk assistance (customer support, inbound/outbound call center, video chat, live chat, email).

• Support for new and renewal user identity proofing subscriptions (specific quantities detailed for Base and Option Periods).

• Compliance with NIST 800-63-2 (LOA 1, 2, 3) and NIST 800-63-3 (IAL 1, 2; AAL 1, 2, 3).

• Compliance with OMB Memo 19-17 and Executive Orders 14249, 14247, 14271.

• International user verification capabilities.

• Interoperability with VA's current infrastructure (SSOe, VA.gov, Mobile platform, Lighthouse API, MHV).

• Web Content Accessibility Guidelines 2.1 Level A and Level AA compliance.

• Product Service Code: 7A21

• NAICS Code: 541519

• Period of Performance: Not explicitly stated, but includes a Base Period and Option Periods.

• Proposals are requested via written solicitation (attached).

• Basis for Award and Submission Instructions are in Section E of the solicitation.

• Offerors must submit proposals for the full requirement; partial proposals will not be considered.

• Only one proposal per Offeror will be considered.

• Incomplete or late proposals will not be considered.

• Questions deadline: Friday, April 24, 2026, 10:00 a.m. Eastern Time.

• Response Date/Time: April 28, 2026, 10:00 a.m. Eastern Time, New York, USA.

• This requirement is a 100% total small business set-aside.

• Offerors must be registered and active in the System for Award Management (SAM) at the time of award.

• The solicitation number is 36C10B26Q0130.

• The contracting office is the Department of Veterans Affairs, Technology Acquisition Center, Eatontown, NJ.

• Contact: William Waterhouse, Contract Specialist, William.Waterhouse@va.gov.

• The solicitation document and a redacted Justification For An Exception To Fair Opportunity are attached.

Justification for an Exception to Fair Opportunity

This document justifies an exception to fair opportunity for a firm-fixed-price delivery order to renew the ID.me Identity and Access Management (IAM) Credential Service Provider (CSP) Software-as-a-Service (SaaS) solution. This renewal includes an annual Credential Brokers license, maintenance support, and help desk assistance.

• Renewal of the ID.me IAM CSP SaaS solution.

• Annual Credential Broker license (up to 125 million MFA events per period).

• Maintenance support, including software updates, patches, and fixes.

• Help desk support, including prioritized escalation for VA-related inquiries.

• Compliance with NIST 800-63-2 (LOA 1, 2, 3) and NIST 800-63-3 (IAL 1, 2; AAL 1, 2, 3).

• Compliance with Web Content Accessibility Guidelines 2.1 (Level A and AA).

• Interoperability with existing VA systems (VA.gov, VA Health and Benefits mobile app, VA Lighthouse API, My HealtheVet).

• Support for international users and verification.

• Specific user and renewal subscription quantities for Base Period and Option Periods.

• Optional tasks for increased MFA events and additional user subscriptions.

• Contract Type: Firm-fixed-price delivery order.

• Period of Performance: 12-month Base Period with three 12-month Option Periods.

• Estimated Value: Not explicitly stated, but the document references a total estimated price.

• This is a justification for an exception to fair opportunity, not a solicitation for proposals.

• The proposed action will be synopsized on the Contracting Opportunities Page.

• Any proposals received will be evaluated.

• The solicitation will be posted as a small business set-aside on the NASA SEWP V website.

• Market research identified potential resellers, including Service-Disabled Veteran-Owned Small Businesses (SDVOSBs) and Women-Owned Small Businesses (WOSBs).

• The justification cites FAR Overhaul VA Deviation 16.507-6(b)(2) as the authority for the exception to fair opportunity, stating that only ID.me can provide the unique and highly specialized services required.

• Market research indicated that alternative solutions (e.g., CLEAR, Login.gov) would require significant reconfiguration and cannot meet all VA requirements, particularly for international users and the Trusted Referee feature.

• Replacing ID.me would incur substantial costs and risks, including an estimated $32 million to run two commercial solutions simultaneously for two years.