Assurance

["Cantor, Scott" <>]

> I'm a little confused, is the application being run locally or by the 
> vendor as a
> service?

I'm sure the latter, I've had the same sort of inquiry.

> Are they monitoring the application or are they monitoring the
> authentication mechanism?

They probably want to monitor both because they'll be blamed for either 
failing. That's just a common problem whenever people support an 
authentication mechanism they're fundamentally uncomfortable with.

-- Scott