SAM #36C10B26Q0466

VA Solicitation for FIDO2 MFA Solution (Yubico, Intercede or Equivalent) with Hardware, Software, and Support

The Department of Veterans Affairs (VA) is seeking a comprehensive Fast IDentity Online 2 (FIDO2) multi-factor authentication (MFA) and certificate management solution to enhance privileged credential usage across 180 VA locations. - Government Buyer: - Department of Veterans Affairs, Technology Acquisition Center (Eatontown, NJ) - Office of Information & Technology (OIT), Infrastructure Operations (IO), Infrastructure Cybersecurity Management (ICSM) - OEMs Highlighted: - Yubico (YubiKey hardware tokens and YubiKey-as-a-Service) - Intercede (MyIDPIV CMS software and services) - Products and Quantities Requested: - MyIDPIV CMS virtual Primary Server (1 unit, part number: MYID-PIV-CMS-SRV-SUB) - MyIDPIV CMS virtual Backup Server (4 units, part number: MYID-PIV-CMS-SRV-SUB) - MyIDPIV Device subscriptions (1,000 units, part number: MYID-PIV-CMS-DVC-100-249-9-SUB) - MyID Backend Database Setup and Initial Support Services (20 units, part number: MYID-PS-TC) - YubiKey YubiKey-as-a-Service (YaaS) hardware tokens (1,000 units, part number: 101094) - Annual maintenance for all major components (quantities match above) - Services Requested: - Provision and maintenance of an online ordering website for procurement and phased delivery of physical tokens by site and quantity - Initial installation, backend database setup, and ongoing technical support - Unique/Notable Requirements: - Solution must integrate with VA's CyberArk platform - Compliance with FedRAMP, Section 508, Zero Trust security controls, and AI requirements - Hardware tokens must be FIPS 140-2 or 140-3 certified and support multiple authentication protocols (FIDO2, WebAuthn, PIV, OATH HOTP/TOTP) - Set-aside for Service-Disabled Veteran-Owned Small Businesses (SDVOSB) with strict subcontracting limitations - Ability to provide phased delivery and inventory management across 180 VA locations - No specific resellers or distributors are named; brand name or equivalent solutions from Yubico and Intercede are specified.

Description

Page 2 of 3

Department of Veterans Affairs Request for Information Fast IDentity Online 2 (FIDO2) Brand Name or Equivalent VA-26-00064800 May 26, 2026

Introduction This RFI is for planning purposes only and shall not be considered an Invitation for Bid, Request for Task Execution Plan, Request for Quotation or a Request for Proposal. Additionally, there is no obligation on the part of the Government to acquire any products or services described in this RFI. Your response to this RFI will be treated only as information for the Government to consider. You will not be entitled to payment for direct or indirect costs that you incur in responding to this RFI. This request does not constitute a solicitation for proposals or the authority to enter into negotiations to award a contract. No funds have been authorized, appropriated or received for this effort. Interested parties are responsible for adequately marking proprietary, restricted or competition sensitive information contained in their response. The Government does not intend to pay for the information submitted in response to this RFI. The North American Industry Classification System (NAICS) for this requirement is 541519 with a size standard of 150 employees.

1. Submittal Information: All responsible sources may submit a response in accordance with the below information. There is a page limitation for this RFI of 10 pages. The Government will not review any other information or attachments included, that are in excess of the 10 page limit. NO MARKETING MATERIALS ARE ALLOWED AS PART OF THIS RFI. Generic capability statements will not be accepted or reviewed. Your response must address capabilities specific to the services required in the attached Product Description (PD) and must include the following:

Interested Vendors shall at a minimum, provide the following information in the initial paragraph of the submission:

Name of Company Address Point of Contact Phone Number Fax Number Email address Company Business Size and Status For VOSB and SDVOSBs, proof of verification in SBA VETCert NAICS code(s) Socioeconomic data Data Universal Numbering System (DUNS) Number Existing Contractual Vehicles (GWAC, FSS, or MAC)

Provide a summary of your capability to meet the requirements contained within the draft PD for the following areas:

Provide a summary of your technical capability to meet the PD requirements.

Provide a summary of your capability and experience in providing and maintaining an online ordering website for the Government s procurement and phased delivery of physical tokens by site location and quantity.

Corporate experience or expertise in performing these services and specific examples or references. Specific examples or references provided must include the agency, point of contact, dollar value, and contract number.

Your company s intent and ability to meet the set aside requirement in accordance with VAAR 852.219-73 (JAN 2023) (DEVIATION) VA Notice of Total SDVOSB and 13 CFR §125.6, which states the contractor will not pay more than 50 percent of the amount paid by the Government to it to firms that are not SDVOSBs. Your response shall include information as to available personnel and financial resources; full names of proposed team members and the PD requirements planned to be subcontracted to them, which must include the prime planned percentage or the names of the potential team members that may be used to fulfill the set aside requirement.

Has the draft PD provided sufficient detail to describe the technical requirements that encompass the software development and production operations support services to be performed under this effort.

_______ YES

_______ NO (if No, answer question f)

If NO , please provide your technical comments/recommendations on elements of the draft PD that may contribute to a more accurate proposal submission and efficient, cost effective effort.

1. Market Research Response Submission

Responses are due no later than 1:00 PM EST, June 2, 2026 via email to Erin Butler, Contract Specialist at Erin.Butler3@va.gov and Contracting Officer Mina Awad at Mina.Awad@va.gov. Please note Fast IDentity Online Solution in the subject line of your response. Mark your response as Proprietary Information if the information is considered business sensitive. The email file size shall not exceed 5 MB.

Note: VA retains sole discretion of whether any post RFI briefings are warranted and which industry partners may be invited to provide additional market research information.

See Attached Document: PD Fast IDentity Online Solution BNE_26 May 2026, version 1.0

Additional Links:Home Landing Page

View original listing