Blog Post

Public Sector Blog
5 MIN READ

Microsoft expands qualification of contractors for Government cloud offerings

RichardWakeman's avatar
Jan 05, 2021

 

This article is in the Microsoft Tech Community Public Sector Blog that covers Microsoft Government Cloud services in the US Sovereign Cloud with Azure Government and Microsoft 365 US Government (GCC High).

 

This article focuses on the eligibility for Microsoft Government Cloud services.

 

Microsoft expands qualification of contractors for government cloud offerings

The primary change to the qualification requirements includes the ability for non-government service providers and contractors to prove eligibility with a U.S. General Services Administration (GSA) System for Award Management (SAM) Registration.

 

For additional methods to prove eligibility, please see below under “Validation Submission Directions”.

 

Historically, eligibility has been a hurdle for U.S. Government contractors and the Defense Industrial Base (DIB) to provide documentation from a government customer.  This has been especially challenging for contractors that are pursuing new contracts with the government but have not yet been awarded a contract. It is a chicken-and-egg scenario, as these contractors may require the use of Microsoft Government Cloud offers to help demonstrate compliance with government regulations required for contract award. In addition, the contractors who are levels deep in the supply chain may not have a direct relationship with a government customer to solicit the requisite documentation.

 

By adding SAM.GOV registrations to the qualification requirements, non-government service providers and contractors may prove eligibility without having to provide a government agency sponsorship letter or signed contract. The GSA SAM registration is free and may be obtained relatively quickly.  You will need to provide Microsoft with documentation including a valid CAGE Code or full SAM registration.  A CAGE Code (also known as SAMs) is a five-character ID number used by the GSA to identify vendors. CAGE stands for “Commercial And Government Entity”.  Alternatively, if you prefer to provide your SAM registration, as opposed to a CAGE Code, you will need to furnish your company’s DUNS (Data Universal Numbering System) number.  We will look up your SAM registration using your DUNS number.

 

Note: The purpose of your SAM registration should be for “All Awards”.  We cannot use it if the purpose is for “Federal Assistance Awards Only”.

 

Microsoft Government Cloud qualification

Microsoft Government cloud offers are available to eligible government customers and non-government organizations sponsored to hold or process controlled information.  The eligibility criteria are consistent across the Microsoft Government cloud offers, to include the following:

 

  • Microsoft Azure Government
  • Microsoft 365 Government (GCC)
  • Dynamics 365 Government (GCC)
  • Microsoft 365 Government (GCC High)
  • Dynamics 365 Government (GCC High)

An eligible government customer is defined by one of the following categories:

 

  • Category 1 “U.S. Government” entity:
    • A federal agency, defined as a bureau, office, agency, department, or other entity of the U.S. Government
    • A state/local entity, defined as one of the following:
      • Any agency of a state or local government in the U.S.
      • Any U.S. county, borough, commonwealth, city, municipality, town, township, special purpose district, or other similar type of governmental instrumentality established by the laws of a customer’s state and located within the customer’s state’s jurisdiction and geographic boundaries
      • The District of Columbia, the Commonwealth of Puerto Rico, Guam, American Samoa, the United States Virgin Islands, and the Northern Mariana Islands
    • A tribal entity, defined as a federally recognized tribal entity eligible for funding and services from the U.S. Department of Interior by virtue of its status as an Indian tribe, or, in Alaska, a native village or Alaska Regional Native corporation, or, in Hawaii, a Native Hawaiian Organization (NHO)

 

  • Category 2 “Solution Provider”: A non-government solution provider doing business with a valid U.S. Government entity

  • Category 3 “Contractor”:  A non-government organization who holds the following types of data:
    • International Traffic in Arms (ITAR)
    • Controlled Unclassified Information (CUI)
    • Department of Defense (DoD) Covered Defense Information (CDI)
    • Department of Defense (DoD) Unclassified Controlled Nuclear Information (UCNI)
    • Department of Energy (DoE) Unclassified Controlled Nuclear Information (UCNI)
    • North American Electric Reliability Corporation (NERC) Information
    • Criminal Justice Information (CJI)
    • Internal Revenue Service (IRS) 1075 Information
    • Other types of data that require Microsoft Government Clouds

 

Note: An international commercial entity may qualify, though regulated data may be required to purchase the service through their U.S. subsidiary using U.S. locations only.

 

Any entity that qualifies for any of the three categories is eligible to purchase any of the Microsoft Government cloud offers.  In the past, only Categories 1 and 3 were eligible to purchase GCC or GCC High.  That is no longer the case.  Category 2 Service Providers are now eligible to purchase GCC and GCC High as well.

 

Validation Submission Directions

All validation requests can now be submitted directly through our online portal.  Please submit for validation using the link below: 

The following documentation is accepted for validation: 

  • A valid CAGE Code or full SAM Registration (with DUNS) to determine eligibility to do business with the U.S. Government (sam.gov)
  • A copy of Government signed contract (direct or indirect), signed PO, or signed Invoice from a valid U.S. Government entity, or another eligible partner directly doing business with a valid U.S. Government entity
  • Documented evidence of a Government contract through a GSA Schedule contract (Direct or Indirect) or the contract number
  • A sponsor letter directly from a valid US Government entity, or another previously approved government contractor or solution provider directly doing business with a valid US Government entity, including their signature (ink or certified electronic) and letterhead, supporting an established business relationship between that Government or approved government contractor or solution provider and your business.  (A sample sponsor letter is attached if needed)
  • Any documentation proving status as a Category 1 U.S. Government entity

 

Appendix

 

Please follow me here and on LinkedIn. Here are my additional blog articles:

 

Blog Title

Aka Link

New! ND-ISAC MSCloud - Reference Identity Architectures for the US Defense Industrial Base

https://aka.ms/ND-ISAC/IdentityWP 

Microsoft CMMC Acceleration Update

https://aka.ms/CMMC/Acceleration

History of Microsoft Cloud Service Offerings leading to the US Sovereign Cloud for Government

https://aka.ms/USSovereignCloud

Gold Standard! Understanding Compliance Between Microsoft 365 Commercial, GCC, GCC-High and DoD Offerings 

https://aka.ms/MSGovCompliance

The Microsoft 365 Government (GCC High) Conundrum - DIB Data Enclave vs Going All In

https://aka.ms/AA6frar

Microsoft US Sovereign Cloud Myth Busters - A Global Address List (GAL) Can Span Multiple Tenants

https://aka.ms/AA6seih

Microsoft US Sovereign Cloud Myth Busters - A Single Domain Should Not Span Multiple Tenants

https://aka.ms/AA6vf3n

Microsoft US Sovereign Cloud Myth Busters - Active Directory Does Not Require Restructuring

https://aka.ms/AA6xn69

Microsoft US Sovereign Cloud Myth Busters - CUI Effectively Requires Data Sovereignty

https://aka.ms/CUISovereignty

 

Updated Aug 27, 2024
Version 6.0
  • ibotnar's avatar
    ibotnar
    Copper Contributor

    RichardWakeman thanks for the article. Does this affect procurement process of G3/G5 ? In the past qualified entities could procure G3/G5 only through validated resellers. Those resellers have different minimums of licenses (can be as high as 500) and onboarding fees. Will this change simplify that process and make it closer to what commercial side looks like where you can just buy form the Microsoft portal as many licenses as you need?

  • JCS_Tex's avatar
    JCS_Tex
    Copper Contributor

    RichardWakeman I’ve been reading through your blogs and they’re all fantastic, so first hats off to you on that! After that, is that GCC High Dynamics trial still available? I remember trying it a few months ago to test builds for customers, but couldn’t access the form