48 10 7.5 Email as a 7. eDiscovery N The Quoter shall include the ability to permanently delete copies of Service Capabilities data in accord with existing federal record retention schedules and policies, as well as to delete back-up versions of data maintained as part of the overall SaaS, in accordance with standard industry procedures for recycling backup media. 48 10 8.1 Email as a 8.User N The Quoter shall allow Government Administrators to provide Service Administration, remote administration of end-user account provisioning, Authentication & and access privileges through a web browser Access interface. 48 10 8.2 Email as a 8.User N The Quoter shall provide configurable synchronization tools for Service Administration, integration with a Government LDAP source for provisioning, Authentication & account disablement and enablement. Access Synchronization communication shall be conducted over Secure Sockets Layer (SSL)/Transport Layer Security (TLS) session supporting FIPS 140-2 encryption. 10 8.3 Email as a 8.User N The Quoter shall comply with Media Protection standards as 48 Service Administration, described in NIST Special Publication 800-88: Guidelines for Authentication & Media Sanitization. Access 48 10 8.4 Email as a 8.User N The Quoter shall support integration with agency directory services Service Administration, supporting an integrated authentication and authorization model Authentication & (single sign on) utilizing the e-Government profile for Security Access Assertion Markup Language 2.0 (SAML 2.0). 10 8.5 Email as a 8.User N The Quoter shall allow Government Administrators to allow 48 Service Administration, access through the use of username and password if an Authentication & administrator determines that the end user cannot utilize the Access identification. agency’s multi-factor 48 10 8.6 Email as a 8.User N The Quoter shall provide end users the ability reset their own Service Administration, passwords. Authentication & Access 10 8.7 Email as a 8.User N The should provide end users with a local client 48 Quoter’s Service Administration, application allowing offline access to cached email. If a separate Authentication & local client application is provided by the Quoter, the local client Access shall only perform all or a subset of all of the functionality solution’s available through the web interface. The local client application shall not be necessary to perform any function offered by the
48 10 7.5 Email as a Service 7. eDiscovery Capabilities N The Quoter shall include the ability to permanently delete copies of data in accord with existing federal record retention schedules and policies, as well as to delete back-up versions of data maintained as part of the overall SaaS, in accordance with standard industry procedures for recycling backup media. 48 10 8.1 Email as a Service 8.User Administration, Authentication & Access N The Quoter shall allow Government Administrators to provide remote administration of end-user account provisioning, and access privileges through a web browser interface. 48 10 8.2 Email as a Service 8.User Administration, Authentication & Access N The Quoter shall provide configurable synchronization tools for integration with a Government LDAP source for provisioning, account disablement and enablement. Synchronization communication shall be conducted over Secure Sockets Layer (SSL)/Transport Layer Security (TLS) session supporting FIPS 140-2 encryption. 48 10 8.3 Email as a Service 8.User Administration, Authentication & Access N The Quoter shall comply with Media Protection standards as described in NIST Special Publication 800-88: Guidelines for Media Sanitization. 48 10 8.4 Email as a Service 8.User Administration, Authentication & Access N The Quoter shall support integration with agency directory services supporting an integrated authentication and authorization model (single sign on) utilizing the e-Government profile for Security Assertion Markup Language 2.0 (SAML 2.0). 48 10 8.5 Email as a Service 8.User Administration, Authentication & Access N The Quoter shall allow Government Administrators to allow access through the use of username and password if an administrator determines that the end user cannot utilize the agency’s multi-factor identification. 48 10 8.6 Email as a Service 8.User Administration, Authentication & Access N The Quoter shall provide end users the ability reset their own passwords. 48 10 8.7 Email as a Service 8.User Administration, Authentication & Access N The Quoter’s should provide end users with a local client application allowing offline access to cached email. If a separate local client application is provided by the Quoter, the local client shall only perform all or a subset of all of the solution’s functionality available through the web interface. The local client application shall not be necessary to perform any function offered by the
gsa-eaas-bpa-requirements-document-1.2.docx