1. Intent of Request for Information (RFI) Due to size constraints on FEDBIZOPS related to pre-solicitation information, this request for information is not the RFI in its entirety. The entire RFI may be found at www.cio.gov/eauthentication. This request for information is intended to seek industry and other interested parties? input into a number of questions relative to the design, build and operation of an Authentication Gateway described in Section 1. The release of this RFI is part of an industry communications strategy that is designed to seek input from a number of venues that have included Technology Day on June 7, 2002, and Industry Day held on June 18, 2002. This RFI is requesting comments and information on specific questions that relate to acquisition, funding, government/industry partnerships, broad technical considerations, future vision/direction, credential evaluation and mapping, administration and management, record retention and privacy. 2. Goal of the RFI The goal of this RFI is to continue the Federal government dialogue with industry and other communities of interest, and to ensure to the maximum extent possible that industry input and comments and other information are given proper and due consideration in development of the Authentication Gateway. The information received in response to this RFI may be considered in the development of any subsequent statement of work, may serve as input to policy considerations, and is intended to obtain a "sense of the industry". The information received will be considered and may be factored into future decisions. When the responses to the RFI are received they will be evaluated and analyzed. A report will be prepared that will detail the results of the RFI. Proprietary information submitted as part of responses to the RFI should be clearly identified and will not be disclosed. 3. Scope This RFI presents and requests information on concepts and approaches that the government is contemplating for government-wide authentication services. This RFI is focused on three areas: technology, acquisition and policy/administration. These three areas will affect the design, build and operation of the Gateway. The government needs to exercise due diligence in its consideration of issues that may arise in any one of the three areas identified in the following section. This RFI contains the following subsections: ? Descriptions of the E-Authentication Gateway Privacy, Policies and Technology - Privacy Framework Needs - Diagram Descriptions ? Directed Topics for Responses - Acquisition - Government/Industry Relationships - Technical - Credential Evaluation and ?Mapping? - Compliance with Government Mandates for Protection of Privacy Information - Digital Credential Providers (DCP) - Anonymous Access - Session Management 4. Responses to RFI are due on August 8, 2002. This RFI is for planning purposes only and shall not be construed as a request for proposal (RFP) or as an obligation on the part of the Government to acquire any products or services. The Government does not intend to award a contract on the basis of this RFI or otherwise pay for the information solicited. No entitlement to payment of direct or indirect costs or charges by the Government will arise as a result of submission of responses to this RFI and the Government?s use of such information. Responses to this RFI must be divided into nine sections. The nine sections must correspond to the Directed Topics for Responses in Section 6 of this RFI. Please limit your response to 50 pages. Additional materials may be placed in an appendix (marketing, technical literature, etc.) Respondents to this RFI may be requested to provide additional information/details based on their initial submittals. Unnecessarily elaborate responses containing extensive marketing materials are not desired. All information contained in this RFI is preliminary and subject to modification and is in no way binding on the government. The Government prefers that no proprietary or confidential business data be submitted in response to this RFI. However, responses to this RFI that indicate that the information therein is proprietary or represents confidential business information will be received and held in confidence for U.S. Government use only. However, GSA?s intent is to develop a subsequent statement of work from the aggregate of the information provided from industry as a whole. Send questions/concerns regarding this RFI via e-mail to
[email protected] with a copy to
[email protected]. Responses to this RFI are to be submitted and addressed to Thomas Crowder, with a copy to Reva Hutchinson, at the above referenced e-mail address, no later than August 8, 2002. Responses should include the name, telephone number and e-mail address of a point of contact having authority and knowledge to discuss responses with government representatives. All correspondence concerning this RFI should refer to GSA RFI No. T02-ALD-001.