Single Sign On Service Definition Prepared by: Richard Mardling Date: 23 rd September 2013 For enquiries regarding this document, please contact: European Head Office: Olympian Trading Estate, Cayton Low Rd Scarborough, North Yorkshire, YO11 3BT www.aurionpro.com Commercial in confidence Aurionpro Solutions plc
Contributors Name Title Telephone E-mail Address Richard Mardling Strategic Business Director 0844 800 1985 richard.mardling@aurionpro.com Steve Ford Principle Consultant 0844 800 1985 steve.ford@aurionpro.com Mike Nelsey Managing Director 0844 800 1985 mike.nelsey@aurionpro.com Robbie Cruickshank-Sutton Account Manager 0844 800 1985 robbie.cruickshanks@aurionpro.com Revision History Version Date Issued Status Reason for Change 0.1 17 th Sept 13 Draft 1.0 23 rd Sept 13 Release This document will be kept under revision control Intellectual Property Rights The material contained in our response, and any material or information disclosed during discussions of the proposal, represents the proprietary, confidential information pertaining to Aurionpro Solutions services, methodologies and methods. Other products and brand names may be trademarks or registered trademarks of their respective owners. By accepting this response, [client name] agrees that the information in this proposal will not be disclosed outside the organization and will not be duplicated, used, or disclosed for any purpose other than to evaluate this proposal. This proposal is subject to a mutually approved agreement or contract specifying full terms and conditions. Commercial in confidence Aurionpro Solutions plc
Contents Executive Summary... Error! Bookmark not defined. 1.1 Overview of Identity (ID) Assurance Attribute Provider... Error! Bookmark not defined. 1.2 Overview of Aurionpro Solutions plc... Error! Bookmark not defined. 1.3 Investment Summary... Error! Bookmark not defined. Project Definition... Error! Bookmark not defined. 1.4 Overview of ID Assurance Attribute Provider... Error! Bookmark not defined. 1.5 Use of Open Source... Error! Bookmark not defined. 1.6 Capacity... Error! Bookmark not defined. 1.7 Test Environment... Error! Bookmark not defined. 1.8 Information assurance... Error! Bookmark not defined. 1.9 On-boarding processes... Error! Bookmark not defined. 1.10 Off-boarding processes... Error! Bookmark not defined. 1.11 Service Management details... Error! Bookmark not defined. 1.12 Service Levels... Error! Bookmark not defined. Pre-requisites... Error! Bookmark not defined. 1.13 Technical requirements... Error! Bookmark not defined. 1.14 Details of any trial service available... Error! Bookmark not defined. Investment Details... Error! Bookmark not defined. 1.15 Pricing... Error! Bookmark not defined. 1.16 Limitations of the Test Service... Error! Bookmark not defined. 1.17 Example calculations... Error! Bookmark not defined. 1.18 Ordering and invoicing process... Error! Bookmark not defined. Commercial Notes... Error! Bookmark not defined. 1.19 Financial recompense model... Error! Bookmark not defined. 1.20 Termination terms... Error! Bookmark not defined. Commercial in confidence Aurionpro Solutions plc
Executive Summary 1.1 Overview of Single Sign On Aurionpro Solutions plc (Aurionpro) has been successfully designing, delivering and supporting single sign on (SSO) solutions since 1998 solutions designed to lower administration overheads and to enable secure user access with fewer passwords to remember. Whether Enterprise Single Sign On (ESSO), Web Access Management or Identity Federation, our Professional Services team will work with you to determine the desired user experience, the most appropriate technology and the necessary integration required. 1.2 Overview of Aurionpro Solutions plc Aurionpro provides Advisory, Implementation and Managed Services Consulting in the Identity and Access Management domain to both public sector and corporate organisations in the UK. We offer complete lifecycle services in this area including strategy, architecture, custom development, implementation, project management and managed support. Our UK based team of dedicated consultants hold manufacturer and industry recognised accreditations including CISSP, ITIL, SSCP and HM Government clearances. Placing emphasis on delivering business benefit by improving user satisfaction and on cutting costs through increased operational efficiency, we provide solutions to public sector organisations that: reduce Service Desk calls, facilitate information sharing within partnerships, secure remote access, streamline the User Lifecycle Management process and enable user self service for administrative functions. With an Identity and Access Management division established since 1998, we are both a Microsoft Gold Identity and Security Partner and an Oracle Gold Partner, specialized in Identity Administration and Analytics. The prestigious Oracle partner awards we have won are testament to our expertise in delivering a range of different identity and security projects. These include multi-year TITAN Award Winners, Oracle Technology Specialist Partner of the Year and the Oracle Partner Network Specialized Middleware Partner of the Year Award for EMEA. 1.3 Investment summary Pricing per day. Please see Aurionpro Solutions plc SFIA Rate Card_Lot 4. Commercial in confidence Page 1 of 6 Aurionpro Solutions plc
Project Definition 1.4 Overview of Single Sign On Aurionpro has been successfully designing, delivering and supporting single sign on (SSO) solutions since 1998 - solutions designed to lower admin overheads and to enable secure user access with fewer passwords to remember. SSO is a topic that ranges from Enterprise Single Sign On (ESSO) through Web Access Management to Identity Federation. The Professional Services team at Aurionpro will work with you to determine the desired user experience, the most appropriate technology and the necessary integration required. The team will also advise on and work with a range of different technologies (OeSSO, OAM, OIF and ADFS) and protocols (SAML 2.0, OpenID and OAuth). 1.5 Information assurance 1.6 Backup/restore and disaster recovery 1.7 On-boarding and off-boarding processes 1.8 Scope Aurionpro will design and deliver the solution as defined within an agreed specification. The solution may comprise some or all of the available single sign on technologies as required by the specification. The Aurionpro team will comprise of a blend of architects, project managers, technical consultants and developers according to the skill sets required to successfully deliver the project. 1.9 Service management details 1.10 Service constraints 1.11 Service Levels Weekdays only (except for standard UK bank holidays) unless otherwise agreed 8 hours per day exclusive of travel and lunch, 09:00 17:00 unless otherwise agreed 1.12 Training Commercial in confidence Page 2 of 6 Aurionpro Solutions plc
1.13 Data restoration / service migration 1.14 Details of any trial service available No trial versions are currently available. Pre-requisites 1.15 Consumer responsibilities The Customer will assign a named core project team who will be available throughout the project. All work to be performed by Aurionpro will be carried out at a single nominated location within the mainland UK or at Aurionpro premises in the UK. All pre-requisites and other requirements to be mutually agreed at project initiation. The Customer will carry out all primary and overall project management. The Customer must provide a suitable working environment for all Aurionpro personnel for all on-site work to include: Meeting rooms for all meetings and conference calls. Dedicated desk space with power. All desks to be in close proximity to one another where multiple Aurionpro personnel are assigned to the project. Internet access. Site access and appropriate building access passes. The Customer must provide the following IT resources: Internet access. A workstation of suitable performance with all necessary software where Aurionpro devices may not be used for project work. Licences for all software required to interact effectively with the project team where the licensed software is not already loaded onto an Aurionpro device. Provision of access to all systems in all environments as necessary to complete the project effectively. The Customer is to perform all liaison with the Customer and any relevant external agency personnel not forming part of the immediate Customer project team. This includes but is not limited to: Arranging meetings Commercial in confidence Page 3 of 6 Aurionpro Solutions plc
Arranging conference calls Booking meeting rooms Sourcing documentation Collating feedback at relevant project stages Issuing documents Ensuring project personnel adherence to deadlines Providing a definitive answer to any queries raised where feedback is contradictory or unclear 1.16 Technical requirements There are no special technical requirements or environmental pre-requisites for the implementation of Single Sign On. Investment Details 1.17 Pricing Pricing per day. Please see Aurionpro Solutions plc SFIA Rate Card_Lot 4. 1.18 Ordering and invoicing process Aurionpro Solutions plc must receive a signed copy of a purchase order before any order can be accepted and processed. Any expenses to be charged must be detailed on a separate line. Purchase orders should be issued to AURIONPRO SOLUTIONS and can be sent by post, fax or e-mail. Details are as follows: By post: Unit 4-5 Olympian Trading Estate Scarborough Y011 3BT United Kingdom By fax: Fax number: 08448003018 FAO: Sales By email: uksales@aurionpro.com Format: pdf Commercial in confidence Page 4 of 6 Aurionpro Solutions plc
Termination Terms 5.1. Either party may terminate this Agreement immediately by notice in writing if the other will suffer or threaten to suffer any form of insolvency, administration or cease or threaten to cease to carry on business. 5. 2. The Consumer may terminate this Agreement: 5. 2. 1. upon giving to the Consultancy 90 days written notice prior to the anniversary of the contract renewal date or the notice period stipulated in the Project Schedule (and the notice period in the Project Schedule shall prevail in the event of conflict between the two); 5. 2. 2. immediately by notice in writing if the Consultancy is in breach of any of the terms of this Agreement and the Consultancy fails to remedy such breach within twenty working days of receiving written notice from the Consumer specifying the breach and requiring its remedy; 5. 3. The Consultancy may terminate the Agreement at the Anniversary of the contract upon giving to the Consumer 30 days written notice prior to the anniversary of the contract renewal date or the notice period stipulated in the Project Schedule (and the notice period in the Project Schedule shall prevail in the event of conflict between the two); 5. 4. Upon termination, in accordance with the Consumer s written direction, the Consultancy will immediately: (a) (b) (c) (d) cease the Supplier Services; prepare and submit to the Consumer an itemisation of all services being supplied by any Consultant completed or partially completed to date and deliver these up to the Consumer; and deliver upon request any work in progress. Raise appropriate invoices for work and applicable expenses incurred in the delivery of such work. 5. 5. The Consultancy agrees that where, within the first two (2) business days of a Project Period, in the opinion of the Consumer the Consultancy or the Key Personnel do not have the skills or expertise required by the Consumer, the Consumer may notify the Consultancy and the Services may terminate immediately and the Consultancy will not invoice the Consumer in relation to the Services provided during this period. Arbitration 6. 1. Any dispute arising out of or in connection with this Agreement, and in particular its termination shall be resolved between the parties in the first instance. 6. 2. Where this is not possible or the parties have failed to agree after a period of 30 elapsed days, then the matter, including any question regarding its existence, validity or termination, shall be referred to and finally resolved by arbitration under the LCIA Rules, which Rules are deemed to be incorporated by reference into this Section. 6. 3. The arbitration shall be heard and determined by a panel of three (3) arbitrators selected in accordance with the Rules. 6. 4. Each Party shall bear its own costs relating to such arbitration, and the Parties shall equally share the arbitrators fees, and the arbitration and all related proceedings and discovery shall take Commercial in confidence Page 5 of 6 Aurionpro Solutions plc
place pursuant to a protective order entered by the arbitrators that adequately protects the confidential nature of the Parties Confidential and/or Proprietary Information. <END OF DOCUMENT> Commercial in confidence Page 6 of 6 Aurionpro Solutions plc