Position: Azure .NET Developer (with B2C / Entra ID expertise)
Duration: 1+ years
Location: Saint Paul, MN (Hybrid)
Description of Project
The Minnesota Department of Information Technology Services (MNIT) is seeking a vendor to work on design improvements with Azure B2C and Azure database that constitutes the LoginMN service infrastructure. The State of Minnesota has an enterprise Identity and Access Management (IAM) solution to provide access to all state public facing applications utilizing one credential.
This service supports approximately 3.2 million residents and businesses that utilize state services.
This proposal outlines the initiative to modifying the existing solutions Azure B2C based.NET environment, that includes Oracle Access Governance component for delegated administrators of some state services.
This proposal also includes the upgrade from Azure B2C to Azure Entra External ID to enhance security, scalability and user experience for our constituents and partners.
The State of Minnesota has built out an enterprise IAM solution utilizing the Azure B2C and Oracle OAG technologies.
The solution has various components for delegated administration Rampart console and Oracle Apex console, as well as various databases that support the service.
For additional information on LoginMN see .
At a high level, the vendor will conduct design improvements and assist with testing and go live support of applications with the LoginMN service infrastructure to ensure the new design doesn't impact performance or accessibility.
Deliverables
Phase 1 Deliverables:
Deliverable #1: Azure B2C Policy Updates and Bug Fixes
- Provide multilingual support to address language requirements used by most Minnesotans for delegated admin console and new screens related to identify and email verifications. The five languages addressed are: English, Spanish, Hmong, Somalian, Vietnamese.
- Provide Azure B2C policy updates to support multi-organization selection and authorization
- Create Intermediate API endpoint to lookup user organizations and roles.
- Implement fix for the multi-domain issues.
- Fix identified delegated admin console and app launcher identified bugs and enhancement requests.
- Complete 300 - 350 Azure B2C enhancements to improve event logging, use with passkeys, manual identity verification, app launcher improvements, including recording of key common attributes per year.
- The complex bug fixes require changes to Azure .net code written for the solution, code changes in identity verification workflow, or voice MFA modifications.
Deliverable #2: Identity Fraud Protection
- Implement Azure API Management implementation to protect B2C intermediate and management APIs
- Implement Azure Front Door Web Application firewall rule analysis and updates
- Replace Microsoft Dynamic Fraud Protection with Socure tool for identity fraud upon account creation and account login.
- Improve account recovery for application launcher to integrated Azure B2C account recovery user journey
- Improve account recovery Azure B2C with identity verification updates.
- Provide onsite identity verification enhancements within delegated administration console.
Deliverable #3: Create new test environment in Azure B2C for partner tenant
- Stand up a new Azure B2C Partner test environment
- Create automated provisioning for partner tenant
- Include tag in partner tenant for those partners that need delegated administration, so partners and business accounts don't provision to Oracle Access Governance
Deliverable #4: Web UI Modifications
- Create a partner B2C web interface with Minnesota branding and accessibility remediation updates.
- Update delegated administration console and app launcher web UI Minnesota with the State's branding and accessibility remediation updates.
- Create ability for users to displace recently used applications and user-defined favorites in the app launcher.
- Update UX/UI delegated administration components based on feedback received and accessibility requirements. The State anticipates an average of 10 -15 updates per year.
Deliverable #5: Functional and Performance Testing
- Provide automating testing updates on Azure B2C user journeys.
- Provide load testing for Azure B2C test environments for constituents and partner tenants.
- Provide end to end testing support.
Deliverable #6: Architecture and Support
- Provide Entra External ID migration planning
- Provide go live support for newly onboarded applications.
- Provide knowledge transfer
Future Phases - Tasks and Deliverables
The State reserves the right to add additional work to the resulting work order to assist with State QA staff requested modifications, bug fixes, and customizations and implement changes to the system stemming from public focus group feedback collected by the State.
Desired Vendor Qualifications
- Five (5) years' experience in Azure B2C Senior development
- Two (2) engagements or projects lasting more than six (6) months in Azure B2C development
- 5+ years C#/.NET experience
- 5+ years writing web-facing services and APIs
- 5+ year front-end development (HTML, CSS, Javascript)
-