Opportunity
SAM #47QACB26Q0069
Post-Quantum Cryptography and Federal Identity Management Support Services (Sole Source to Scalar, LLC)
Buyer
GSA Administrative Services Division
Posted
September 24, 2026
Identifier
47QACB26Q0069
NAICS
541519, 541512, 541690, 541990
This opportunity from GSA's Office of Government-wide Policy seeks specialized support services for federal post-quantum cryptography (PQC) and identity management modernization. - Sole source contract awarded to Scalar, LLC due to unique expertise - Services required: - PQC testing and experimentation in contractor environment aligned with NIST standards - Development and update of quantum-resistant Federal Reference Test Cases (FRTCs) for FIPS 201 Evaluation Program, including PACS, credentials, FIDO2, mPIV, and derived credentials - Production of governmentwide guidance documents for next-generation digital identity technologies (IDManagement.gov) - Subject matter expert support for Federal PKI policy and FICAM Architecture updates, including algorithm transition and hybrid cryptography planning - Driven by urgent federal mandates (OMB M-26-15, Executive Orders) - No specific products, part numbers, or purchase quantities listed; focus is on technical and advisory services - Contract period of performance runs through June 15, 2027, with no option periods - No competing OEMs or products identified due to sole source justification
Description
GSA’s OGP Federal Identity and Cybersecurity Division aligns civilian agency ICAM policy with the FICAM Architecture and manages the FIPS 201 Evaluation Program, which approves PIV and PACS products for the GSA Approved Products List.
OMB M-26-15 directs agencies to migrate to post-quantum cryptography by December 31, 2030, requires GSA to establish an interagency ICAM modernization working group, and tasks the FICAM Office with testing PQC-ready access systems for 2027 pilots.
To support this mandate, the Division requires specialized services in four areas:
PQC Testing: Plan and document testing of access systems in an isolated contractor environment aligned with NIST standards. Quantum-Resistant FRTCs: Develop and update FRTCs for PACS, credentials, FIDO2, mPIV, and derived credentials. Governmentwide Guidance: Produce guidance on next-generation digital identity technologies for IDManagement.gov. PKI and FICAM SME Support: Support updates to Federal PKI policies and the FICAM Architecture for PQC readiness, including algorithm transition and hybrid cryptography planning.