SITA RFP 3263-2026: Multi-Factor Authentication Solution in...

Share this tender

Description

The Implementation of a Multi-Factor Authentication and Non-Repudiation Logical Access Control Solution Including Maintenance and Support for a Period of Five (05) years. Non Compulsory Virtual Briefing Session Will Be Held On 20 July 2026 at 11ham.The Closing Date Has Being Extended Till 25 September 2026

What this tender is about

The State Information Technology Agency (SITA) is seeking proposals for the implementation of a Multi-Factor Authentication (MFA) and Non-Repudiation Logical Access Control Solution. This includes five years of maintenance and support. The solution aims to enhance security and provide irrefutable proof of data origin, receipt, and integrity for sensitive transactions. Bidders are required to provide a turn-key solution, including infrastructure and software. A non-compulsory virtual briefing session was held on 20 July 2026. The closing date for submissions is 11 September 2026. Submissions must be made electronically via the SITA Supplier Oracle ERP portal.

Scope of work

• Implementation of a Multi-Factor Authentication and Non-Repudiation Logical Access Control Solution, including maintenance and support for five years.(RFP 3263 2026 -Standard Bidding Do..., section Invitation to Bid (SBD 1))
• The solution must provide MFA logical access control and non-repudiation to DHA Core Applications and application transactions.
• The solution must integrate with core systems including National Population Register, Service Manager, Movement Control System, and Automated Biometric Identification System.
• The solution must support identity federation, allowing users to access multiple applications with a single set of credentials.
• The solution must support identity orchestration to ensure consistency of identities and user access policies.
• The bidder must provide a turn-key solution including physical servers and network infrastructure at primary and secondary sites.
• The solution must provide MFA for identified core applications, including National Population Register, Service Manager, and Movement Control System.

Important requirements

• Bidders must ensure compliance with their tax obligations and provide their unique Personal Identification Number (PIN) issued by SARS.(RFP 3263 2026 -Standard Bidding Do..., section Tax Compliance Requirements)
• All bids must be submitted on the official forms provided and in the manner prescribed in the bid document.(RFP 3263 2026 -Standard Bidding Do..., section Bid Submission Requirements)
• The proposal must be signed by an authorised employee, agent or representative of the bidder.(RFP 3263 2026 -Standard Bidding Do..., section Bid Submission Instructions)
• Bidders must submit a valid B-BBEE status level verification certificate or sworn affidavit to qualify for preference points.(RFP 3263 2026 -Standard Bidding Do..., section Invitation to Bid (SBD 1))
• All logs associated with user activity must be stored for 2-3 years in an online state, and archived for 20 years or more.(RFB 3263-2026 Questions and Answer..., section 2.1.27- Data Storage:)
• The migration must include all historical data to ensure accessibility after the current MFA solution is decommissioned.(RFB 3263-2026 Questions and Answer..., section 2.1.27- Data Storage:)

How to submit

• All bid proposals must be submitted via the SITA -Supplier Oracle ERP portal before the closing date and time.(RFP 3263 2026 -Standard Bidding Do..., section Bid Submission Instructions)
• No manual hard copy submissions, email submissions or faxed submissions will be accepted.(RFP 3263 2026 -Standard Bidding Do..., section Bid Submission Instructions)
• Bidders are required to submit all returnable documents/information together with their Bids/proposals on or before the closing time and date.(RFP 3263 2026 -Standard Bidding Do..., section Bid Submission Instructions)
• The SITA Supplier Oracle ERP portal is accessible on the URL: www.suppliers.sita.co.za.(RFP 3263 2026 -Standard Bidding Do..., section Bid Submission Instructions)

Updates and addenda

• The closing date for the tender has been extended to 11 September 2026.

What is in the documents

• RFP 3263 2026 -Standard Bidding Document Amended.docx

  This document outlines the invitation to bid, submission requirements, terms and conditions, bidder disclosures, preferential procurement, and general conditions of contract for the RFP. It details the scope of work, evaluation criteria, and mandatory returnable documents.

• RFB 3263-2026 Questions and Answers Pack 1.docx

  This document provides clarifications on bidder eligibility, server infrastructure responsibilities, user count and pricing, delivery timelines, and technical requirements such as tamper detection, HSM integration, and data storage for the RFP.

• RFB 3263-2026 Questions and Answers Pack 2.docx

  This document addresses specific questions regarding preferred time-stamping providers and the types of interfaces required for the solution.

• RFB 3263-2026 Questions and Answers Pack 3.docx

  This document clarifies aspects of the solution architecture, required protocols and integration standards, MFA methods, smartcard and biometric integration, PKI, certificates, transaction signing, and transaction-level non-repudiation.

Tender documents (12)

• PDFRFP 3263-2026-Invitation to bidders Letter.pdf
• DOCRFP 3263 2026 -Standard Bidding Document Amended.docx
• DOCRFB 3263-2026 Questions and Answers Pack 1.docx
• DOCRFB 3263-2026 Questions and Answers Pack 2.docx
• FILERFP 3263-2026- VENDOR BRIEFING SESSION PRESENTATION 20 July 2026.pptx
• PDFRFP 3263-2026-Invitation to bidders Letter Amended.pdf
• and 6 more

Contact person