⑴ Classification of the products to be procured : 14

⑵ Nature and quantity of the products to be rent : Campus-wide IT Authentication Platform System 1 Set

⑶ Type of the procurement : products to be rent

⑷ Basic requirements of the procurement :

A.The system consists of SSO (Single Sign-On) System, Personal ID Management and Federation System and Network System.

B.SSO System consists of SSO System in Campus and SSO System for Gakunin (The Academic Access Management Federation in Japan).

C.SSO System in campus must provide the following requirements.

⑴ SSO function conform to OASIS-SAML2.0 for campus-wide service corresponding to the SSO authentication and authorization federation.

⑵ Function to the user attribute information in Master data system with the campus-wide service applications in support of SSO authentication federation.

⑶ Function that allows users to delegate their operating privileges to other users (or allows them to input data as other users) for campus-wide service application corresponding to SSO authentication federation.

D.SSO System for Gakunin must provide the following requirements.

⑴ Function that enable the authentication federation with Service Providers (SP) are provided by participating universities and companies of Gakunin.

⑵ Function that enable generating attribute information defined in System Administration Standards for the GakuNin (Ver. 2.5) using the user attribute information managed by the master data system.

⑶ Function that present list of the user attribute information to be transferred on web browser and confirm to provide to third-party, when members in Osaka University first access to Service Providers (SP) in Gakunin.

E.Personal ID Management and Federation System consists of Master Data System, Mission-critical Identity Management System and Workflow System.

F.Master Data System must provide the following requirements.

⑴ Function to register user attribute information for staff and students of Osaka University using CSV format data obtained from the registration authority in office.

⑵ Function that edit user attribution informations are registered in ⑴ and update some of attribute information by themselves.

⑶ Function for report (print) output to distribute system information such as Personal ID to users.

⑷ Function that enable access control to Master Data System such as administrator authority setting.

G.Mission-Critical Identity Management System must provide the function to transmit user attribution informations to mission-critical systems in campus (DBMS, LDAP, Active Directory) in secure communication.

H.Workflow System must have provide the following requirements.

⑴ Workflow applications which relate to Campus-Wide IT Authentication Platform Service is provided on web browser.

⑵ Function that manage each application information in workflow cooperating with Master Data System.

⑶ Function that set the authority to use workflow d on user attribute information.

I.Network System must have provide the following requirements.

⑴ Each device that make up this system must be connected to the network in a way that does not cause low communication delay.

⑵ Each device of Campus-Wide IT Authentication Platform System is connected to network switch in campus LAN as necessary.

⑶ Connection standard and switch ports to network connection which is required in Campus-Wide IT Authentication Platform System must be provided.

J.Countermeasure to avoid the stop of system service by the redundancy of server and network in system fault must be provided.

K.Function to generate total report according to the request of Osaka University by collection and integration of all system log must be provided.

L.Technical supports including regular maintenances, recoveries from failures and consulting in system operations must be provided to avoid system crashes.

M.Function to detect fault by Network monitoring, Life and Death check of critical services such as SNMP in remote maintenances must be provided. For maintenance work, it is necessary to introduce a system that gives sufficient consideration to security, such as restricting IP addresses, maintenance terminals or using security tokens.

N.Unnecessary operating privileges for work accounts and data age accounts on the server shall be restricted from a security perspective (necessary restrictions shall be discussed with the University and implemented).

O.For privileged IDs, the system should have functions such as access control for each person in charge of operations, operation trail storage, audit functions, and anomaly detection by behavior.

P.Checking and reporting functions for servers with highly vulnerable software, and patch management functions

Q.It should be possible to acquire backup data for each server on a regular basis and to save the acquired backup data for emergencies such as disasters.

R.For other campus systems within the university that are currently ed with the Campus-Wide IT Authentication Platform System for authentication and data, migration work should be carried out so that the next system will have the same age.

⑸ Time limit for the submission of the requested material : 17 : 15 21 June, 2021

⑹ Contact point for the notice : MICHIKI Hiroharu, Contract Division, Department of Finance, Osaka University, 1-1 Yamadaoka Suita shi Osaka 565-0871 Japan, TEL 06-6879-4006