Background
British Columbia Lottery Corporation ("BCLC") is the Crown corporation which conducts and manages commercial gaming in British Columbia in accordance with the Gaming Control Act (BC) and the Criminal Code. B.C. Lottotech International Inc. ("BCLII") is a wholly owned subsidiary of BCLC. If this RFP is issued by BCLII, references to BCLC throughout are deemed to be references to BCLII.
Purpose
BCLC's mission is to operate gambling responsibly to benefit all British Columbians. BCLC's vision is to deliver exceptional gambling entertainment. BCLC's corporate strategy outlines how the "OneBCLC" and "P360" strategic initiatives point us towards our vision and will ultimately fulfill our mission.
To continue to fully engage our players, BCLC must be able to offer entertaining experiences that exhibit the characteristics of responsible growth listed above. A holistic player experience provides the foundation for responsible growth while preserving our existing investments. The Customer Identity and Access Management (CIAM) capability is the technical component that will underpin the holistic player experience at BCLC.
The purpose of this negotiated request for proposal (the "RFP") is to receive proposals for the provision of managed services with respect to the ForgeRock CIAM Platform. The managed services could be either
· the provision of a SaaS offering of the ForgeRock CIAM Platform to BCLC by the Proponent, or
· the provision of managed services to BCLC by the Proponent that enables the delivery of a ForgeRock CIAM Platform to BCLC, where the platform is hosted from a secure cloud service provider (under this model, BCLC will separately arrange licensing for the ForgeRock CIAM Platform)
(either, (the "CIAM Service").
To enable the latter option of hosting from a secure cloud service provider, ") BCLC would intend to obtain ForgeRock licensing separately through a 3rd party vendor. The CIAM Service should include:
1. The ForgeRock CIAM Platform delivered as: a Managed CIAM Service (based on Platform-as-a-Service (PaaS) and/or Infrastructure-as-a-Service (IaaS)) implemented within a secure Cloud Service Provider (CSP) environment; and/or, a Software-as-a-Service (SaaS) instance(s) provided via a secure CSP.
2. Canadian-sovereign access and hosting of the CIAM Service as required by BC privacy legislation.
3. Professional CIAM services ("Professional Services") to facilitate the planning, delivery, implementation, testing, migration, adoption, continuous improvement and the support of ongoing operations throughout the lifetime of the CIAM platform at BCLC. Professional Services could be necessary for the initial Implementation phase and subsequent ongoing initiatives.
4. Ability to obtain ForgeRock licencing in the future if BCLC deems desirable.
This RFP seeks to identify the best ForgeRock CIAM Service offering for BCLC. The successful proponent should have differentiated and mature service offerings that are capable of satisfying a number of requirements and standards, including, but not limited to: business, technical, legal, privacy, regulatory and security.
Proponents
A proponent is an entity, or entities acting together, who submit a proposal in response to this RFP (a "Proponent"). A Proponent must explicitly confirm mandatory criteria are met in their response before BCLC will evaluate subjective answers to non-mandatory requirement questions.
The provision of Professional Services in this RFP are associated with the CIAM Service provider only and, by themselves, are not sufficient to warrant an RFP response. Potential RFP respondents who only supply Professional Services should explicitly not respond to this RFP.
