authentication web service

project ??" to design and implement an authentication service for other programs satisfying the following requirements - system must provide web service interface - system must run on windows professional and greater platforms (it should not require server versions of windows. linux support is ideal but not required. - system must be able to utilize ldap compatible server - system must provide capability of internal user database when external ldap server is not used (administrator configurable setting) - internal user data base must not store passwords as clear text - internal user data base must have an administrator configurable maximum/minimum password and username length - internal user data base must be able to enforce at least one alphabetic and one non-alphabetic character for passwords - internal user data base must be able to enforce non-numeric character in the first and last position for passwords - internal user data base must be able to enforce the user id not being part of the password - internal user data base must be able to enforce a maximum change interval for passwords - internal user data base must be able to enforce a maximum number of password changes for which the password cannot be reused - internal user data base must be able to enforce a maximum number of identical consecutive characters for passwords - internal user data base must be able to enforce a maximum consecutive identical characters from any position in the previous password - internal user database must not delete users but rather only inactivate - the internal database may actually be an ldap server but there should be no licensee fee, source should be available - system must provide administrative interface to manage users - system should audit trail all logon attempts and success/failure status of the attempt - system must provide architectural support for two factor authentication ??" access tokens, biometrics, etc ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables): a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment. b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request. 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). ## Platform - system must run on windows professional and greater platforms (it should not require server versions of windows. linux support is ideal but not required.