Position : Azure .NET Developer (with B2C / Entra ID expertise)
Duration : 1+ years
Location : Saint Paul, MN (Hybrid)
Description of Project
The Minnesota Department of Information Technology Services (MNIT) is seeking a vendor to work on design improvements with Azure B2C and Azure database that constitutes the LoginMN service infrastructure. The State of Minnesota has an enterprise Identity and Access Management (IAM) solution to provide access to all state public facing applications utilizing one credential.
This service supports approximately 3.2 million residents and businesses that utilize state services.
This proposal outlines the initiative to modifying the existing solutions Azure B2C based.NET environment, that includes Oracle Access Governance component for delegated administrators of some state services.
This proposal also includes the upgrade from Azure B2C to Azure Entra External ID to enhance security, scalability and user experience for our constituents and partners.
The State of Minnesota has built out an enterprise IAM solution utilizing the Azure B2C and Oracle OAG technologies.
The solution has various components for delegated administration Rampart console and Oracle Apex console, as well as various databases that support the service.
For additional information on LoginMN see https : / / login.mn.gov / .
At a high level, the vendor will conduct design improvements and assist with testing and go live support of applications with the LoginMN service infrastructure to ensure the new design doesn't impact performance or accessibility.
Deliverables
Phase 1 Deliverables :
Deliverable #1 : Azure B2C Policy Updates and Bug Fixes
- Provide multilingual support to address language requirements used by most Minnesotans for delegated admin console and new screens related to identify and email verifications. The five languages addressed are : English, Spanish, Hmong, Somalian, Vietnamese.
- Provide Azure B2C policy updates to support multi-organization selection and authorization
- Create Intermediate API endpoint to lookup user organizations and roles.
- Implement fix for the multi-domain issues.
- Fix identified delegated admin console and app launcher identified bugs and enhancement requests.
- Complete 300 - 350 Azure B2C enhancements to improve event logging, use with passkeys, manual identity verification, app launcher improvements, including recording of key common attributes per year.
- The complex bug fixes require changes to Azure .net code written for the solution, code changes in identity verification workflow, or voice MFA modifications.
Deliverable #2 : Identity Fraud Protection
Implement Azure API Management implementation to protect B2C intermediate and management APIsImplement Azure Front Door Web Application firewall rule analysis and updatesReplace Microsoft Dynamic Fraud Protection with Socure tool for identity fraud upon account creation and account login.Improve account recovery for application launcher to integrated Azure B2C account recovery user journeyImprove account recovery Azure B2C with identity verification updates.Provide onsite identity verification enhancements within delegated administration console.Deliverable #3 : Create new test environment in Azure B2C for partner tenant
Stand up a new Azure B2C Partner test environmentCreate automated provisioning for partner tenantInclude tag in partner tenant for those partners that need delegated administration, so partners and business accounts don't provision to Oracle Access GovernanceDeliverable #4 : Web UI Modifications
Create a partner B2C web interface with Minnesota branding and accessibility remediation updates.Update delegated administration console and app launcher web UI Minnesota with the State's branding and accessibility remediation updates.Create ability for users to displace recently used applications and user-defined favorites in the app launcher.Update UX / UI delegated administration components based on feedback received and accessibility requirements. The State anticipates an average of 10 -15 updates per year.Deliverable #5 : Functional and Performance Testing
Provide automating testing updates on Azure B2C user journeys.Provide load testing for Azure B2C test environments for constituents and partner tenants.Provide end to end testing support.Deliverable #6 : Architecture and Support
Provide Entra External ID migration planningProvide go live support for newly onboarded applications.Provide knowledge transferFuture Phases - Tasks and Deliverables
The State reserves the right to add additional work to the resulting work order to assist with State QA staff requested modifications, bug fixes, and customizations and implement changes to the system stemming from public focus group feedback collected by the State.
Desired Vendor Qualifications
Five (5) years' experience in Azure B2C Senior developmentTwo (2) engagements or projects lasting more than six (6) months in Azure B2C development5+ years C# / .NET experience5+ years writing web-facing services and APIs5+ year front-end development (HTML, CSS, Javascript)