Vendor needs to provide identity and access management solution. – The proposed Identity and Access Management (IAM) solution must be deployable as an on–premises hosted system within the existing virtualized environment. – The solution must not rely on phone–based authentication methods. – The solution must also be deployable across both physical Windows endpoints and VDI–delivered environments, supporting both shared and one–to–one workstation use cases. – The system must deliver robust multifactor authentication (MFA) at the desktop level, supporting multiple authentication methods such as badge, PIN, password, facial recognition, fingerprint biometrics etc. – The solution supports the automated rotation of AD and application passwords to secure, complex values, while abstracting this complexity from the end user. – The proposed solution offers Privileged Access Management (PAM) capabilities to secure administrative access for internal IT staff.