{"id":1778,"date":"2026-07-17T10:17:44","date_gmt":"2026-07-17T08:17:44","guid":{"rendered":"https:\/\/iamfactory.de\/nicht-kategorisiert\/open-source-in-public-procurement\/"},"modified":"2026-07-23T15:13:16","modified_gmt":"2026-07-23T13:13:16","slug":"open-source-in-public-procurement","status":"publish","type":"post","link":"https:\/\/iamfactory.de\/en\/update-log\/open-source-in-public-procurement\/","title":{"rendered":"Open Source in Public Procurement"},"content":{"rendered":"<p>[et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#04092a&#8221; use_background_color_gradient=&#8221;on&#8221; background_color_gradient_stops=&#8221;rgba(4,9,42,0.71) 0%|rgba(4,9,42,0.7) 100%&#8221; background_color_gradient_overlays_image=&#8221;on&#8221; background_image=&#8221;https:\/\/iamfactory.de\/wp-content\/uploads\/2025\/09\/case-studies_header.webp&#8221; background_position=&#8221;center_left&#8221; custom_padding=&#8221;100px||150px||false|false&#8221; bottom_divider_style=&#8221;asymmetric4&#8243; bottom_divider_color=&#8221;#dfe4e8&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row column_structure=&#8221;2_3,1_3&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;2_3&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_post_title meta=&#8221;off&#8221; featured_image=&#8221;off&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; title_font=&#8221;Hanken-Grotesk_bold||||||||&#8221; title_text_color=&#8221;#FFFFFF&#8221; title_font_size=&#8221;60px&#8221; title_letter_spacing=&#8221;1px&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_post_title][\/et_pb_column][et_pb_column type=&#8221;1_3&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; next_background_color=&#8221;#ffffff&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#dfe4e8&#8243; bottom_divider_style=&#8221;asymmetric4&#8243; bottom_divider_height=&#8221;50px&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row column_structure=&#8221;3_5,2_5&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;3_5&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; border_width_right=&#8221;1px&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; text_font_size=&#8221;25px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; hover_enabled=&#8221;0&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221; sticky_enabled=&#8221;0&#8243;]<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 ez-toc-wrap-left counter-flat ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Inhaltsverzeichnis<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/iamfactory.de\/en\/update-log\/open-source-in-public-procurement\/#What_the_Expert_Opinion_Changes\" >What the Expert Opinion Changes<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/iamfactory.de\/en\/update-log\/open-source-in-public-procurement\/#Finally_government_agencies_can_require_open_source_instead_of_just_hoping_for_it\" >Finally, government agencies can require open source instead of just hoping for it<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/iamfactory.de\/en\/update-log\/open-source-in-public-procurement\/#Changes_in_Exemption_Law\" >Changes in Exemption Law<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/iamfactory.de\/en\/update-log\/open-source-in-public-procurement\/#Four_Reasons_Why_an_Open-Source_Requirement_Is_Justified_in_RFPs\" >Four Reasons Why an Open-Source Requirement Is Justified in RFP&#8217;s<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/iamfactory.de\/en\/update-log\/open-source-in-public-procurement\/#%E2%80%9COpen_source_is_a_licensing_model_not_a_technology%E2%80%9D\" >&#8220;Open source is a licensing model, not a technology.&#8221;<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/iamfactory.de\/en\/update-log\/open-source-in-public-procurement\/#Why_this_is_particularly_relevant_to_us_in_the_IAM_context\" >Why this is particularly relevant to us in the IAM context<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/iamfactory.de\/en\/update-log\/open-source-in-public-procurement\/#From_a_Neutral_Request_for_Proposals_to_Clear_Requirements\" >From a Neutral Request for Proposals to Clear Requirements<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/iamfactory.de\/en\/update-log\/open-source-in-public-procurement\/#Demo_Request\" >Demo Request<\/a><\/li><li class='ez-toc-page-1'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/iamfactory.de\/en\/update-log\/open-source-in-public-procurement\/#Experience_IAM_Factory_in_Action\" >Experience IAM Factory in Action<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"What_the_Expert_Opinion_Changes\"><\/span>What the Expert Opinion Changes<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;|23px||||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p style=\"text-align: justify;\">A report by the German Bundestag\u2019s Science Service clears the final hurdle under public procurement law for open source in tenders. What this means for contracting authorities and IAM projects, and what a legally compliant requirement looks like in practice. <\/p>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=&#8221;2_5&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; text_font_size=&#8221;25px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Finally_government_agencies_can_require_open_source_instead_of_just_hoping_for_it\"><\/span>Finally, government agencies can require open source instead of just hoping for it<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;||3px|||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"3:1-3:709;73-781\" style=\"text-align: justify;\">Until recently, contracting agencies found themselves in an awkward position. Anyone drafting a request for proposals had to keep it technology-neutral and, in principle, accept any bid that met the required performance criteria. A mandatory open-source requirement was considered legally risky, so, to be on the safe side, the language was kept neutral. The result of this caution was paradoxical. A government agency that, for good reasons, wanted to pursue an open-source approach ended up evaluating bids that included proprietary products\u2014and often found itself exactly where it didn\u2019t want to be. The desire for digital sovereignty and the rules of procurement pulled in different directions.     <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"5:1-5:83;783-865\" style=\"text-align: justify;\">The Scientific Service of the Bundestag has now resolved this dilemma.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"7:1-7:320;867-1186\" style=\"text-align: justify;\">On July 16, 2026, an expert opinion was released that clarifies the key question: Are public contracting authorities permitted to mandate open-source software in a request for proposals? The response from the Scientific Services is clear: They are permitted to do so, and in many cases, there are even more arguments in favor of it than against it.   <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; text_font_size=&#8221;25px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Changes_in_Exemption_Law\"><\/span>Changes in Exemption Law<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;||3px|||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"11:1-11:460;1229-1688\" style=\"text-align: justify;\">The gist of it is simple. An open-source requirement in the request for proposals is permissible as long as it is <strong>objectively justified, proportionate, and transparently substantiated<\/strong>. This is not a blank check. A government agency that requires open source must be able to explain why this requirement serves the purpose at hand. Where suitable open-source offerings are lacking, the expert opinion further recommends adding the phrase \u201cor equivalent\u201d to ensure that competition remains open.    <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"13:1-13:462;1690-2151\" style=\"text-align: justify;\">The key difference from the old practice lies elsewhere. In the past, the contracting authority had to keep the door open to every technological proposal and hope that the right one would ultimately win. In the future, it will be allowed to make the desired characteristic a requirement from the outset, rather than leaving it to the vagaries of the proposals submitted. The expert opinion even goes a step further and considers such a requirement to be necessary under certain circumstances\u2014not merely permissible.   <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; text_font_size=&#8221;25px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Four_Reasons_Why_an_Open-Source_Requirement_Is_Justified_in_RFPs\"><\/span>Four Reasons Why an Open-Source Requirement Is Justified in RFP&#8217;s<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;||3px|||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"17:1-17:149;2193-2341\" style=\"text-align: justify;\">The paper cites several justifications for an open-source requirement, and they align remarkably well with what we know from IAM projects.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"19:1-19:318;2343-2660\" style=\"text-align: justify;\">The first is <strong>IT security<\/strong>. Open-source code can be reviewed, audited, and further developed independently, whereas a closed black box prevents exactly that. Especially in identity management, where a single piece of software controls the access rights for thousands of accounts, traceability is not just an academic luxury.  <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"21:1-21:254;2662-2915\" style=\"text-align: justify;\">Then there&#8217;s <strong>interoperability<\/strong>. Open standards and documented interfaces make it easier to integrate with existing systems, which\u2014in complex government environments with a dozen source systems\u2014often determines whether a project succeeds or becomes a never-ending task. <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"23:1-23:649;2917-3565\" style=\"text-align: justify;\">The third point\u2014 <strong>dependence on a specific manufacturer<\/strong>\u2014is the most serious. Recent case law from the European Court of Justice requires public contracting authorities to think strategically as early as the initial award stage about whether a procurement decision will create future dependencies that restrict competition. A vendor lock-in that the contracting authority has brought upon itself is generally not sufficient justification for a direct award without competitive bidding. The actual obligation, therefore, is to avoid such dependencies from the outset. This is precisely what open source achieves, because it prevents a dependency on a single vendor from arising in the first place.    <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"25:1-25:266;3567-3832\" style=\"text-align: justify;\">That leaves <strong>long-term cost efficiency<\/strong>, of which the license fee is only the visible part. What\u2019s usually more expensive is the item that doesn\u2019t appear on any invoice: the loss of bargaining power vis-\u00e0-vis a provider who knows full well that you can\u2019t switch. <\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;||3px|||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<blockquote>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"17:1-17:149;2193-2341\" style=\"text-align: justify;\">The real risk of a proprietary IAM solution isn&#8217;t today&#8217;s license price. It&#8217;s the bill that comes when the contract needs to be renewed and there are no longer any alternatives. <\/p>\n<\/blockquote>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; next_background_color=&#8221;#ffffff&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#dfe4e8&#8243; use_background_color_gradient=&#8221;on&#8221; background_color_gradient_direction=&#8221;91deg&#8221; background_color_gradient_stops=&#8221;rgba(4,9,42,0.78) 48%|rgba(4,9,42,0.39) 100%&#8221; background_color_gradient_overlays_image=&#8221;on&#8221; background_image=&#8221;https:\/\/iamfactory.de\/wp-content\/uploads\/2025\/09\/Demoanfrage.webp&#8221; background_position=&#8221;center_right&#8221; top_divider_style=&#8221;asymmetric4&#8243; top_divider_color=&#8221;#ffffff&#8221; top_divider_height=&#8221;50px&#8221; top_divider_flip=&#8221;vertical&#8221; top_divider_height_tablet=&#8221;50px&#8221; top_divider_height_phone=&#8221;50px&#8221; top_divider_height_last_edited=&#8221;on|phone&#8221; bottom_divider_style=&#8221;asymmetric4&#8243; bottom_divider_height=&#8221;50px&#8221; border_color_bottom=&#8221;#0433d1&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;50px||50px||false|false&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk_bold||||||||&#8221; text_text_color=&#8221;#FFFFFF&#8221; text_font_size=&#8221;35px&#8221; text_letter_spacing=&#8221;1px&#8221; header_text_align=&#8221;center&#8221; text_orientation=&#8221;center&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p>Digital Sovereignty at IAM Factory<\/p>\n<p>[\/et_pb_text][et_pb_button button_url=&#8221;@ET-DC@eyJkeW5hbWljIjp0cnVlLCJjb250ZW50IjoicG9zdF9saW5rX3VybF9wYWdlIiwic2V0dGluZ3MiOnsicG9zdF9pZCI6Ijc5IiwiZW5hYmxlX2h0bWwiOiJvZmYifX0=@&#8221; button_text=&#8221;IAM as a Service&#8221; button_alignment=&#8221;center&#8221; _builder_version=&#8221;4.27.4&#8243; _dynamic_attributes=&#8221;button_url&#8221; _module_preset=&#8221;default&#8221; custom_button=&#8221;on&#8221; button_text_size=&#8221;16px&#8221; button_text_color=&#8221;#FFFFFF&#8221; button_bg_color=&#8221;#0433d1&#8243; button_bg_use_color_gradient=&#8221;on&#8221; button_bg_color_gradient_direction=&#8221;135deg&#8221; button_bg_color_gradient_stops=&#8221;#3fced0 0%|#0433d1 0%&#8221; button_border_width=&#8221;0px&#8221; button_border_radius=&#8221;10px&#8221; button_font=&#8221;|700||on|||||&#8221; button_use_icon=&#8221;off&#8221; custom_padding=&#8221;10px|20px|10px|20px|true|true&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221; button_bg_color__hover_enabled=&#8221;on|hover&#8221; button_bg_color_gradient_stops__hover=&#8221;#0433d1 100%|#3fced0 100%&#8221; button_bg_use_color_gradient__hover=&#8221;on&#8221; button_letter_spacing__hover_enabled=&#8221;off|hover&#8221; button_letter_spacing__hover=&#8221;1px&#8221; button_bg_color__hover=&#8221;#0433d1&#8243;][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk||||||||&#8221; text_font_size=&#8221;23px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2 style=\"margin-top: 18.0pt; text-align: justify;\"><span class=\"ez-toc-section\" id=\"%E2%80%9COpen_source_is_a_licensing_model_not_a_technology%E2%80%9D\"><\/span>&#8220;Open source is a licensing model, not a technology.&#8221;<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=&#8221;1_3,2_3&#8243; make_equal=&#8221;on&#8221; _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;1_3&#8243; module_class=&#8221;content-vertical-align-center&#8221; _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; overflow-x=&#8221;visible&#8221; overflow-y=&#8221;visible&#8221; custom_padding=&#8221;0px||0px||false|false&#8221; border_radii=&#8221;off||20px||20px&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_image src=&#8221;https:\/\/iamfactory.de\/wp-content\/uploads\/2026\/07\/OSBA_.png&#8221; alt=&#8221;Open Source Business Alliance Logo Abbreviation&#8221; title_text=&#8221;OSBA_&#8221; module_class=&#8221;speaker-card&#8221; _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;||||false|false&#8221; border_radii=&#8221;off||20px||20px&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_image][\/et_pb_column][et_pb_column type=&#8221;2_3&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"31:1-31:422;4093-4514\" style=\"text-align: justify;\">Peter Ganten, CEO of the Open Source Business Alliance, sums up the practical impact of the report when he says it frees government employees from a sense of uncertainty that has long paralyzed them. His second point carries more weight than it might initially seem. Open source is a licensing model, not a specific technology, and it is this that gives rise to transparency and resilience.  <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"33:1-33:568;4516-5083\" style=\"text-align: justify;\">This distinction clears up a common misconception. Open-source software is not automatically more modern or more securely programmed than commercial software. The difference lies in the rights an organization retains over its own software. It can view the code, modify it, have it maintained by another service provider, and retains control even if the original provider raises prices or exits the market. For a government agency that operates systems for ten or fifteen years, this is a compelling argument.    <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; text_font_size=&#8221;25px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Why_this_is_particularly_relevant_to_us_in_the_IAM_context\"><\/span>Why this is particularly relevant to us in the IAM context<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;||3px|||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"37:1-37:520;5134-5653\" style=\"text-align: justify;\">Identity &#038; Access Management is a prime example of the interdependencies addressed in the report. An IAM system occupies one of the most sensitive positions in the entire infrastructure. It knows who has which permissions, provisions accounts in line with business processes, reconciles access rights, and revokes access as soon as someone leaves the organization. Anyone who ties this central hub to a proprietary product creates a dependency precisely where a future switch would be particularly costly.   <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"39:1-39:532;5655-6186\" style=\"text-align: justify;\">We regularly see with higher education and government clients that the real hurdle is rarely the license. It\u2019s the connectors and the data logic behind them. If the rules governing how identities are correlated and permissions are granted are locked into a proprietary format, you only have limited control over your own process landscape. With an open-source platform like midPoint, this logic remains transparent and transferable\u2014which makes all the difference when it\u2019s time to switch service providers or migrate a system.   <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"41:1-41:723;6188-6910\" style=\"text-align: justify;\">Being honest is part of it. Open source doesn\u2019t solve every problem, and the most common reason for this has little to do with the software itself. It\u2019s called a shortage of personnel. Many organizations have to focus on the expertise they actually have in-house, and independently operating an open-source IAM platform is rarely part of that. That\u2019s exactly why we\u2019ve deliberately focused on managed services and SaaS. This way, a university or government agency gets the benefits of an open, vendor-neutral solution without having to build its own operations team. The report doesn\u2019t force anyone to use open source. It simply removes the pressure of knowingly ending up with a solution you didn\u2019t even want in the first place.       <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; text_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; text_font_size=&#8221;25px&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_font_size=&#8221;30px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_font_size=&#8221;25px&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"From_a_Neutral_Request_for_Proposals_to_Clear_Requirements\"><\/span>From a Neutral Request for Proposals to Clear Requirements<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.6&#8243; _module_preset=&#8221;default&#8221; custom_padding=&#8221;||3px|||&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"45:1-45:679;6971-7649\" style=\"text-align: justify;\">For contracting authorities, this report significantly shifts the landscape. Until now, those who demanded open source were under pressure to justify their position. In the future, those who deliberately tie a key component to a single vendor\u2014even though open-source alternatives are available\u2014will be the ones who have to explain themselves. A clearly formulated requirement specifies the verifiable characteristics that are needed\u2014such as disclosed source code, documented interfaces, and the right to further development by third parties\u2014rather than a specific product. This ensures the desired outcome without closing the door to genuine competition among open-source providers.    <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"47:1-47:235;7651-7885\" style=\"text-align: justify;\"><strong>Digital sovereignty<\/strong> was long just a buzzword for political rhetoric. Now there is a legal basis for translating it into concrete tender documents. The framework for this was essentially already in place; the expert opinion makes it robust.  <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"49:1-49:261;7887-8147\" style=\"text-align: justify;\">Don\u2019t want to wait any longer and end up with yet another stopgap solution for your next RFP? Then get in touch with us now using the <a href=\"https:\/\/iamfactory.de\/en\/software-as-a-service\/#demoanfrage\" target=\"_blank\" rel=\"noopener\">contact form<\/a>. We\u2019ll show you exactly what a legally compliant open-source requirement looks like in your IAM project\u2014from the scope of work to operations.  <\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; next_background_color=&#8221;#04092a&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#dfe4e8&#8243; use_background_color_gradient=&#8221;on&#8221; background_color_gradient_direction=&#8221;91deg&#8221; background_color_gradient_stops=&#8221;rgba(4,9,42,0.78) 48%|rgba(4,9,42,0.39) 100%&#8221; background_color_gradient_overlays_image=&#8221;on&#8221; background_image=&#8221;https:\/\/iamfactory.de\/wp-content\/uploads\/2025\/09\/Demoanfrage.webp&#8221; background_position=&#8221;center_right&#8221; custom_margin=&#8221;||-100px||false|false&#8221; custom_padding=&#8221;||80px||false|false&#8221; top_divider_style=&#8221;asymmetric4&#8243; top_divider_color=&#8221;#FFFFFF&#8221; top_divider_height=&#8221;50px&#8221; top_divider_flip=&#8221;vertical&#8221; bottom_divider_style=&#8221;asymmetric4&#8243; background_last_edited=&#8221;off|phone&#8221; background_horizontal_offset_phone=&#8221;0%&#8221; border_color_bottom=&#8221;#0433d1&#8243; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; custom_margin=&#8221;|auto|-38px|auto||&#8221; custom_padding=&#8221;80px||33px||false|false&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_text _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; header_2_font=&#8221;Hanken-Grotesk_bold|700||on|||||&#8221; header_2_text_align=&#8221;left&#8221; header_2_text_color=&#8221;#FFFFFF&#8221; header_2_font_size=&#8221;35px&#8221; header_2_letter_spacing=&#8221;2px&#8221; header_3_font=&#8221;Hanken-Grotesk_thin||||||||&#8221; header_3_text_align=&#8221;left&#8221; header_3_text_color=&#8221;#FFFFFF&#8221; header_3_font_size=&#8221;30px&#8221; custom_margin=&#8221;||30px||false|false&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Demo_Request\"><\/span><b>Demo Request<\/b><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Experience_IAM_Factory_in_Action\"><\/span>Experience IAM Factory in Action<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>[\/et_pb_text][et_pb_text _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; text_text_color=&#8221;#FFFFFF&#8221; custom_margin=&#8221;||45px||false|false&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p>During a one-on-one presentation, we\u2019ll show you<br \/>how our modular <b>Software as a Service solution<\/b> works in practice.<\/p>\n<p><span data-contrast=\"auto\" lang=\"DE-DE\" class=\"TextRun Highlight SCXW129060329 BCX8\"><span class=\"NormalTextRun SCXW129060329 BCX8\">Experience modern identity and access management in action and get answers to your questions.<\/span><\/span><\/p>\n<p>[\/et_pb_text][et_pb_button button_url=&#8221;https:\/\/iamfactory.de\/en\/software-as-a-service\/#demo-request&#8221; button_text=&#8221;Schedule an appointment&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; custom_button=&#8221;on&#8221; button_text_size=&#8221;16px&#8221; button_text_color=&#8221;#FFFFFF&#8221; button_bg_use_color_gradient=&#8221;on&#8221; button_bg_color_gradient_direction=&#8221;135deg&#8221; button_bg_color_gradient_stops=&#8221;#3fced0 0%|#0433d1 0%&#8221; button_border_width=&#8221;0px&#8221; button_border_radius=&#8221;10px&#8221; button_font=&#8221;|700||on|||||&#8221; button_use_icon=&#8221;off&#8221; custom_padding=&#8221;10px|20px|10px|20px|true|true&#8221; locked=&#8221;off&#8221; global_colors_info=&#8221;{}&#8221; button_bg_color__hover_enabled=&#8221;on|hover&#8221; button_bg_color_gradient_stops__hover=&#8221;#0433d1 100%|#3fced0 100%&#8221; button_bg_use_color_gradient__hover=&#8221;on&#8221; button_letter_spacing__hover_enabled=&#8221;off|hover&#8221; button_letter_spacing__hover=&#8221;1px&#8221;][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A report by the German Bundestag\u2019s Science Service clears the final hurdle under public procurement law for open source in tenders. What this means for contracting authorities and IAM projects, and what a legally compliant requirement looks like in practice. <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[14,13],"tags":[],"class_list":["post-1778","post","type-post","status-publish","format-standard","hentry","category-news","category-update-log"],"_links":{"self":[{"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/posts\/1778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/comments?post=1778"}],"version-history":[{"count":2,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/posts\/1778\/revisions"}],"predecessor-version":[{"id":1780,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/posts\/1778\/revisions\/1780"}],"wp:attachment":[{"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/media?parent=1778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/categories?post=1778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/iamfactory.de\/en\/wp-json\/wp\/v2\/tags?post=1778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}