SPS-02379 RFID Authenticator

Description

The Scottish Prison Service (SPS) currently utilises Microsoft Multi-Factor Authentication (MFA) for staff operating within hybrid working environments. However, due to operational and security restrictions within the prison estate, SPS does not permit the use of mobile phones in secure areas and is therefore unable to adopt Microsoft Authenticator for many desk-based users. SPS has also considered the use of Windows Hello; however, a significant proportion of desktop devices within the prison estate are not equipped with webcams, limiting the viability of biometric authentication, while the use of PIN-based authentication does not align with SPS's preferred approach for strengthening authentication controls. As a result, SPS is seeking market feedback on RFID-based authentication solutions, including the provision of USB RFID readers and a centrally managed solution for the administration of authentication tokens and user access. As part of the initial phase of the rollout, SPS would expect proposals to include RFID stickers or tags that can be applied to existing staff identification badges, enabling rapid deployment while minimising disruption to current processes. SPS is concurrently progressing a separate workstream to introduce RFID/MiFare-enabled staff identity cards, which will replace the interim stickers as part of a wider ID pass refresh programme. While alternative MFA solutions, such as physical security keys and hardware tokens, are available within the market, SPS is particularly interested in exploring RFID-based approaches due to the operational benefits they may offer in terms of user experience, simplified administration, reduced logistical overheads associated with issuing and replacing devices, and the ability to more effectively manage staff turnover across a geographically dispersed prison estate. Suppliers are invited to provide information on their proposed solution, deployment approach, management capabilities, integration with Microsoft Entra ID and existing SPS infrastructure, scalability, security compliance, and experience of delivering similar implementations within regulated or security-conscious environments. The SPS has issued this Preliminary Market Consultation (PMC) notice to gain an understanding from suppliers and relevant industry experts to determine current market capability, emerging technologies and potential innovation relating to the provision of solutions for the management of estate, project and asset information across its estate. The SPS welcomes responses from suppliers capable of delivering potential solutions for all or part of the aforementioned areas of interest. The PMC will allow SPS to assess available solutions, explore opportunities for innovation and understand technical and compliance considerations. This PMC is not a regulated procurement exercise and does not constitute an intention to award a contract. It is instead an information gathering and market shaping activity designed to support the planning of any subsequent potential procurement process. Additional information and more detailed requirements may be provided as part of subsequent market engagement activities. Suppliers are invited to provide written information on proposed solutions, submit technical details or concept proposals, and share non confidential insights that support SPS's understanding of what the market can provide. Suppliers may also be asked to meet with SPS to show SPS their solutions. Information obtained during this exercise will be used solely to inform potential future procurement.