Steps from Request for Proposal (RFP) until Vendor Selection for an Identity Manager Solution

Create a request for proposal and select a solution for Identity Manager Solutions is not different for other tools RFP’s, and it is a process that can take around 10 to 30 weeks average.

On a high-level, following are some of the steps necessary to perform you Identity Manager tool selection.

11 steps from RFP to Vendor selection

1. Organization internally creates a draft RFP.

Some times the organization decides to contract external consultant to collaborate and provide their expertise in the area. This can be very useful specially when organization team members are busy in the daily task activities.

2.Organization research in the market and determine your vendor short list.

Take advantage or entities like Gartner report to identify your possible vendors list. Some options to consider are One Identity Manager, Sailpoint, Forgerock, among many others.

3. Organization obtains the vendor’s Non-Disclosure Agreement (NDAs) and issue the RFP.

4. Vendors review the RFP and deliver their proposal.

Provide a deadline time-frame (day and time ).

5. Organization takes the time to evaluate the responses.

Organization needs to make sure evaluate form is consistent for all the decision team.

6. Organization short list and prepare for demos.

Organization should select their key Use Cases and critical scenarios.

7. Organization assigns the schedule and get the demo done in 1 or 2 weeks time-frame depending on the number of vendors.

8. Organization evaluates and down select to two finalist.

9. Vendors prepare for PoC.

10. Vendors conduct the PoC presentation and technical discussion about the selected use cases.

11. Organization decide on winner, and start the project.

If there is a need to compress or shortcut the process, you can have a limited set of target vendors, define an internal team to do hands-on testing rather than reading proposals. If decision is based in 2 vendors, consider to go directly to the PoC steps.

Gabriel MagariƱo is a Security Manager, Identity & Access Management Evangelist. He currently leads multiple deployment teams and specializes in One Identity products, and has recently expanded his repertoire to include IdentityIQ & IdentityNow by Sailpoint, Okta & One Login, CyberArk. Gabriel enjoys exploring other products like OpenIDM, OpenAM by ForgeRock, JumpCloud, and many others sharing technical knowledge on this web site. He has a Computer Science Master degree with additional certifications like ITIL, SCRUM, One Identity Architect,IdentityNow,etc.