Identity and Access Management

Identity and Access Management Project Description :ABOUT FCC FCC is Canada’s leading agriculture and food lender, dedicated to the industry that feeds the world. FCC employees are committed to the long-standing success of those who produce and process Canadian food by providing flexible financing, AgExpert business management software, information and knowledge. FCC provides a complement of expertise and services designed to support the complex and evolving needs of food businesses. As a financial Crown corporation, FCC is a stable partner that reinvests profits back into the industry and communities it serves. For more information, visit fcc.ca. RFP CONTACT Ronke Niagwan Procurement Manager Farm Credit Canada procurement@fcc.ca RFP SCOPE FCC is a cloud centric organization that uses a diverse set of systems to support various business initiatives. Secure access to these systems, efficient management of identities’ access, and

well-defined governance is critical for continued resiliency. Recognizing that threats are increasingly targeting identities, FCC has strategic objectives to strengthen its identity access management (IAM) posture and has prioritized that initiative. FCC currently uses several IAM products but is looking to streamline, consolidate, and optimize identity access management of its internal personnel by acquiring a holistic solution to manage and govern identities and access. FCC has a dedicated IAM team that manages day-to-day identity and role-based access activities and develops and maintains automations to minimize manual effort. The automations have been developed over several years and span various scripting and automation technologies. The holistic solution will replace the automations that have been developed using its robust automation and workflow capabilities. The IAM team has also developed an extensive, but primitive RBAC database. The solution will replace the primitive artifacts and processes with native and robust RBAC capabilities. FCC currently uses Microsoft products for identity provider (IdP) capabilities and the holistic solution will include various governance and identity access centralization, administration, and automation capabilities, and will include a robust and maintainable integration between the IdP and the novel platform. The novel platform will also integrate with the upstream HR system, which is the identity source of truth, and will efficiently broker identity and access management to downstream target systems. Additionally, the platform will integrate and work with FCC’s privileged access management (PAM) platform to manage and govern privileged access. FCC regularly conducts access reviews of its systems using a legacy identity access governance platform and intends for the holistic solution to replace the system and assume access review responsibilities. The expectation is that the solution will be able to provide access review capabilities for the systems already in scope and expand to more systems in the future. Customer identity and access management (CIAM) and decentralized identity management are not within the targeted scope of this requisition. A successful requisition will result in the implementation of the first phase of an IAM solution (base platform implementation and core integrations) and a strategy for rolling out remaining phases of the solution’s capabilities (subsequent platform enhancements and target system integrations). FCC has roughly 2500 users that operate in a hybrid model of remote work and working at FCC locations across Canada. FCC’s corporate office is in Regina, Saskatchewan, Canada with field offices located across the country. The holistic IAM solution MUST include the following high-level capabilities: Contact Information :-Ronke Niagwan 000-000-0000 procurement@fcc-fac.ca