Identity and Access Management

The Department of Homeland Security forecasts a 12-month, departmentwide follow-on BPA for identity, credential and access management support, valued at $50 million to $100 million. The forecast identifies a sole-source acquisition with no specified small-business set-aside; DHS targets a November 20, 2026 solicitation and expects an award in the first quarter of FY2027.

MeriTalk and sponsor Okta are promoting an educational ebook on public-sector identity security, covering threats including session hijacking, lateral movement, unmanaged machine identities, and shadow AI. The resource is not a solicitation or award, but it offers procurement teams and contractors a checklist of issues relevant to zero trust, identity and access management, and cyber resilience.

A technical guide outlines OAuth 2.1-style authentication, audience-bound tokens, per-tool scopes, and audit controls for AI agents using Model Context Protocol servers. It identifies no government buyer, funding, solicitation, or acquisition path, but offers topics for agencies and contractors to consider in AI security evaluations.

Zero-trust analysis points to asynchronous security-signal sharing as a way to reassess access against current risk rather than rely on stale tokens. Federal procurement teams can evaluate support for the OpenID Foundation’s SSF and CAEP, but the article identifies no solicitation, award, or funding announcement.

A WashingtonExec op-ed warns that AI is accelerating cyberattacks and urges federal agencies to strengthen access controls, patching, incident response, and oversight of AI adoption. The priorities may create opportunities for contractors in cybersecurity services and post-quantum readiness, while CISA’s existing CDM program offers an established pathway—not a newly announced solicitation or award.