SW-119656 - USA (North Carolina) - Onsite and Online Managed Bookstore Services - Deadline October 20,2026

(1) Vendor needs to provide onsite and online managed bookstore services.– These services must include a combination of traditional physical bookstore locations and online bookstore operation.– Solution must ensure that security patches for vulnerabilities published by the platform Vendor or otherwise (Common Vulnerabilities and Exposures (CVE)) are applied with timing appropriate to their severity as defined by the Common Vulnerability Scoring System (CVSS) or similar.– Vendor must offer equitable access program pricing for curriculum courses.– ARCHITECTURE DIAGRAMS– The two architecture diagrams are required at the time of offer submission:• Network Architecture Diagram• Technology Stack Diagram– Diagrams must clearly depict:• Hosting model (SaaS, College–hosted, cloud–hosted)• Network segmentation and routability (VLAN–aware, DHCP/DNS compatible)• Integration points and APIs• Identity and access components• Security controls and encrypted protocols (HTTPS, SSH, SMBv3)– Identity and Access Management– The proposed solution must externalize identity and access management and support State–approved– At a minimum, the solution must:• Support SAML 2.0 and/or Microsoft Entra ID (Azure AD) Single Sign–On• Provide role–based access control (RBAC)• Support group–based role provisioning via SCIM, Entra ID, or API integration• Require SSO for administrative access when supported• Enforce multi–factor authentication (MFA) for any local administrative accounts• Adhere to the principle of least privilege and segregation of duties(2) All question must be submitted no later than September 22, 2026.(3) The contract period will be for three years.