- Some of these features are complicated to setup.
- Just as "authentication management" is more powerful than "password management," these projects are going to be longer.
- SSPR for mobile users -- need to integrate with and customize temporary VPN connection.
- Smart card PIN reset -- need to integrate with one-off card management system and with whatever card readers and cards have been deployed.
- HDD key recovery -- needs IVR plus key recovery server integration.
- Expect 30+ day deployments, even if there are just 2-3 integrations.