VR-Group Plc (hereinafter also "VR" or "contracting entity") is procuring a modern SaaS based IAM Solution. The procurement also includes implementation and support services (hereinafter “Solution”).

The preliminary scope of the procurement is described in more detail in Annex 1 "Preliminary description of the procurement". More detailed information regarding the content and schedules of the negotiations will be provided to the selected tenderers. Functional and non-functional requirements as well as system and integration architecture requirements will be provided later during the procurement procedure. All requirements for the procurement, as well as the contract terms, will be defined during the procurement procedure. All final requirements will be presented in the final invitation to tender.

VR is looking for a robust, scalable and Solution which is a single product or products from the same product family as well as supplier who will implement the Solution (including integrations and migrations) in the given target schedule and has expertise in similar implementation programs. Supplier provides solution continuous support. The scope of the procurement will cover all these aspects.

The target of this procurement is that the new Solution will replace two current IAM systems. At the moment separate systems are used in Finland and in Sweden. Thus, the new Solution needs to cover operations in Finland, Sweden and be easily extended to other countries in the future, if necessary.

This procurement will focus on IAM services for employees and VR’s partners. VR will renew the current VRIM IDM package and its related components with the Identity Governance and Administration (IGA) solution that is now being acquired. In addition, the selected Supplier must connect this new IGA solution to the parts of the services remaining to VR Group and implement it into a functional IAM entity. For the sake of clarity, it should be noted that VR Group has Access Management (AM) components in use and intends to continue using them in principle. In addition to the IGA solution, the procurement may also include [e.g. Access Management or Privileged Access Management (PAM)] modules as an option.

VR expects the selected supplier to have proven expertise in implementing large scale IAM solutions for multinational organizations. The supplier should demonstrate experience with SaaS-based IAM implementations, including integrations with relevant enterprise systems. Additionally, the supplier should have the capability to provide ongoing support and system updates in compliance with European data protection regulations.

VR Group consists of around 15 legal entities in Finland, Sweden and Latvia and has over 9100 employees. This procurement is made for all legal entities under VR Group, i.e. VR-Group Plc and all its group companies.

At the commencement of the procurement procedure there are:

• In Finland 12 relevant legal entities. In addition, there is also a maintenance company VR FleetCare.

• In Sweden VR Sverige AB and VR Snabbtåg Sverige AB, and

• In Latvia VR Services Latvia SIA

The new Solution needs to cover operations in Finland, Sweden and be easily extended to other countries in the future, if necessary. In case new VR Group entities would be established, the procured solution must be possible to take into use in also such entities.