The subject of this tender is:

The procurement of an SSO system including services.

Due to the value of the order and the complexity of the system,

Vergabeordnung: VgV

Type of procedure: Negotiated procedure with competitive bidding.

elected.

The mission of the German Heart Center Munich (DHM) is the care of children, adolescents and adults with heart disease. The Heart Center conducts diagnostics and therapy according to the latest medical knowledge and contributes to the further development of diagnostic and therapeutic concepts through its own practical research.

The guiding principle of the hospital is to bring together the various disciplines required for the diagnosis and treatment of cardiovascular diseases under one roof, so that patients are optimally cared for in constant close interdisciplinary cooperation. This concept has proven itself excellently in over 40 years and has now found numerous imitators throughout Europe.

There are four clinics and three institutes at the German Heart Center Munich:

- Department of Cardiovascular Surgery

- Department of Congenital Heart Disease Surgery and Paediatric Cardiac Surgery

- Clinic for Cardiovascular Diseases in Adulthood

- Department of Pediatric Cardiology and Congenital Heart Defects

- Institute of Anesthesiology

- Institute of Laboratory Medicine

- Institute of Radiology and Nuclear Medicine

Facts and figures about the setup:

- 1 Location

- 11,215 inpatient treatment cases p.a.

- 22,923 outpatient treatment cases p.a.

- 7 stations "Normal"

- 4 stations "Intensive"

- 197 Bettenplätze (PLAN)

- 167 seats "normal station", all incl. bed-related monitor (GE/Philips)

- 53 places "intensive"

- 16 seats "IMC"

- CPU/emergency room runs as IMC

- 3 places EPU

- 8 places HK

- 4*I

- 2*MONTH

- 2* OP Hybrid

- 5 operating theatres, including 2* OR hybrids

- 1 pacemaker surgery

- 179 doctors

- 349 nurses

Qualified authentication mechanisms must be used for the electronic processes of the EPO, the PDMS, the AIMS, the ZNA module, the electronic curve, the HIS and also all office applications.

For rule-based and legally compliant authentication, "collective registrations" are no longer permitted. Each user must authenticate himself or herself in a qualified manner for the respective process. Cumbersome authentication procedures such as e.g. Entering a password or a code is not practical and is therefore out of the question. For fast authentication, a management tool is to be purchased, which enables fast, qualified and secure authentication on the respective devices via an authentication medium (e.g. RFID chip).

A single sign-on administration tool is to be purchased, which manages the entire "rights concept" of the clinic. The tool acts directly with the existing Active Directory (AD) and takes over the personal data from there. The rights templates are created and managed in SSO. The users are then assigned the corresponding rights templates (authorizations).