Official UK procurement notice
Identity and Access Management (IDAM) Solution
Authority: Scottish Water
Sectors: Software Packages & ERP (48) Delivery: Scotland (UKM)
Framework ceiling (notional)£4,000,000framework ceiling, not attributable revenue
Submissions closed 25 Aug 2025
What is being bought
Published requirement descriptionScottish Water is looking to refresh the existing Identity and Access Management (IDAM) technologies (including Microsoft Identity Manager), with a Cloud Based solution and the implementation of a fully supported model (including third party alliance management).
CPV: Software package and information systems
How this framework works
From the published notice- Places
- up to 1 suppliers
The lotProcurement structure
single lot · value publishedLot #1Published value£4,000,000
- Background Information<br/><br/>Scottish Water is looking to refresh the existing Identity and Access Management (IDAM) technologies (including Microsoft Identity Manager), with a Cloud Based solution and the implementation of a fully supported model (including third party alliance management). The solution will ensure that Scottish Water will have control of the End-to-End lifecycle of the user accounts (internal and external third parties), as well as evidencing simplification and improvements to the existing process and technology currently in place. <br/><br/> The end solution must also ensure there is an enhanced level of resilience for critical national infrastructure whilst removing manual interventions, improving existing control processes and maintaining relevant policies and compliance (e.g. UK DPA and General Data Protection Regulation). <br/> <br/>The successful solution must be able to support Scottish Water’s technical future expectations and is expected to provide the technical capabilities for and transform how the organisation approaches its Identity and Access Management needs and processes. <br/><br/> <br/>2. New Contract Requirements<br/> <br/>End to End solution/application capable of managing and transforming the Scottish Water Identity and Access Management Processes which includes: <br/><br/>Platform replacement of current IDAM solution with a modernised Identity Governance Admin (IGA) Platform <br/><br/>• Replacement of Microsoft Identity Management (MIM). <br/><br/>• Refresh of supporting orchestration engine – e.g. Entra ID. <br/><br/>• Improved audit and reporting capabilities on the Joiners, Movers, Leavers (JML) and Risk Management processes for access management. <br/><br/>• Capabilities to enable automated Role Based Access Controls with third party applications, e.g. Entra Id, Oracle, WorkDay with the potential for deployment into Scottish Water to be considered with the potential for deployment into Scottish Water via recognised integration approaches (e.g. Connextors/APIs) <br/><br/>• Consistent user experience (internally and for third-parties) so they can view permissions and access rights. <br/><br/>• Decommissioning of existing Identity and Access Management Technologies. <br/> <br/><br/>Deployment into Scottish Water <br/><br/>• Manage the End-to-End delivery and transition to the new IDAM solution to support the technology and process changes required for the SW strategy (including Design, Development, Configuration and Data Management). <br/>• Manage the required integration to Input (e.g. HR or ServiceNow) systems or Output systems (e.g. Directories or Applications). <br/>• Management of all required decommissioning. <br/>• End to End test management and test activities for the new IDAM processes. <br/>• The IGA tool must provide functionality to help Scottish Water leverage analytics to detect and respond to anomalous access patterns or potential security risk. <br/>• Ownership and completion of all relevant deliverables to support the Scottish Water internal change governance and framework, including stakeholder management. <br/>• Delivery of communications and training as agreed appropriate with Scottish Water. Evidence of existing training already incorporated with vendors own solution. <br/><br/> <br/>Policy, Support and Maintenance <br/><br/>• Compliance with all relevant data, identity and access policies and regulations such as UK DPA & General Data Protection Regulation (GDPR). <br/>• Consistent policies across Scottish Water for on-premises and hosted (cloud) services. <br/>• Ownership and completion of all relevant governance deliverables in line with Scottish Water Digital Change framework. <br/>• Evidence of vendor supportability, timelines and service management criteria. <br/> <br/><br/>Business Process Optimisation <br/><br/>• Analysis of processes and tools for managing digital identity lifecycle for Employees, and third parties (e.g. Delivery Partners, Contractors and supply chain orgs) and have the capabilities to manage machine identities. <br/>• The IGA tool should have the capabilities to connect Business to Business and Business to Customer. <br/>• Tools and supporting processes to manage the user lifecycle from provisioning through to de-provisioning of accounts and access rights, authentication & applications. <br/>• Increased automation, efficiency and speed of JML process. <br/>• Full audit and reporting capabilities on the JML and Risk Management processes for access management. <br/>• Development of Role Based Access Control optimisation and appropriate Risk Management and Security checks in the processes. <br/><br/>The solution must be able to support all Scottish Water employees and third-party identities– mapping of these requirements is required (includes Europe (EU) and other offshore locations). <br/><br/>Data storage must follow Scottish Water policies on geographical requirements. <br/><br/>Although remote working is likely, where face to face collaboration is necessary, it is expected Scottish Water’s principal office at The Bridge, 6 Buchanan Gate, Glasgow G33 6FB will be deemed the project base address, and any travel or associated cost would be absorbed by the vendor and not Scottish Water. Additional information: atamis-scottishwater.my.salesforce-sites.com/ProSpend__CS_PublicL… ↗
What it takes to wini
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).
Evaluation split and conditions of participation as published; the tender pack may add morei
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).
- Shortlisting
- See Procurement Documents for further information.
What this means for your bid
- “Identity and Access Management (IDAM) Solution” is a framework: the contest is a place on its panel, up to 1 suppliers, not a single contract.
Procedure terms & legal framework
From the official record · publisher note attached- Procedure method
- Negotiated procedure with prior call for competition
- Legal basis
- CELEX · 32014L0025 Utilities Contracts Regulations 2016 (Directive 2014/25/EU)
- Procurement category
- Goods
- Notice status
- Closed
- Procurement threshold
- Unspecified in notice
- Regulatory regime
- Standard
- Commercial structure
- Framework agreement
- Who may use this agreement
- Not stated in the notice; call-off rights may be limited to the establishing authority
- Competition type
- Competitive procedure
- GPA / WTO covered
- Yes (GPA)
- Recurring procurement
- No (one-off requirement)
- First published
- 30 Jul 2025, 16:33 BST
- Last source update
- 30 Jul 2025, 16:33 BST
- Authority reference
SW25/DIG/1511- FTS notice number
2025/S 000-044443- Classification (CPV)
- Delivery area
- Official registry OCID
ocds-h6vhtk-05697eFind a Tender
Contract terms
- Performance terms
See Procurement Documents for further information.
Publisher note: https://atamis-scottishwater.my.salesforce-sites.com/ProSpend__CS_PublicLandingPage?SearchType=Projects
How it was run
Official noticeRun through: Atamis (Health Family) · Who buys & how to bid on Atamis
Access & registration note: Free · one account PER buying organisation portal · password resets come "from Salesforce.com" (check spam)
- Appointment period ends
- 25 Aug 2025, 12:00 BST
- Submission channel
- {"electronicSubmission"}
- Accepted languages
- en
Detailed submission instructions & authority contactsFrom official release
Timeline
30 Jul 2025 → 25 Aug 2025 · 2 dates- Notice published30 Jul 2025, 16:33 BST
- Admission / appointment period endsperiod end, not a bid countdown25 Aug 2025, 12:00 BST
Contracting authority & participating public bodies
Dispute resolution & review bodies
- Glasgow Sheriff CourtReview body
Official documents & specifications (2)
Official links; attachments are not copiedTender pack and attachments
- Economic and financial selection criteria
- Technical selection criteria