An organization in Ohio is seeking a comprehensive identity and access management (IAM) solution to be deployed on-premises within its existing virtualized infrastructure. The desired system must be capable of supporting both physical Windows endpoints and virtual desktop infrastructure (VDI) environments, accommodating shared and individual workstation use cases.

The solution should incorporate robust multifactor authentication (MFA) at the desktop, supporting a variety of authentication methods such as badge, PIN, password, facial recognition, and fingerprint biometrics. Notably, phone-based authentication methods are not permitted. Additionally, the system should offer automated rotation of Active Directory and application passwords to secure, complex values, while minimizing end-user burden.

Privileged Access Management (PAM) capabilities are also required, ensuring secure administrative access for internal IT staff. Vendors with experience delivering comprehensive IAM systems that include MFA and PAM features are invited to respond.