Looking at the topic now. My advice is make sure your processes are really solid or it will only be big hinderance to getting work done. Also for segementation reasons I am leaning towards vendors that can offer me a device to put in my data center.
In an agent based system don't underestimate the overhead of maintaining the connection to the master. In a busy enterprise you can quickly find yourself with orphaned agents.
Define a lifecycle for PAM processes and size the team correctly.
I think there are a few items that you need to focus on when you are looking at a privilege access management (PAM) solution.
Scope of the project (what problems exist today and tomorrow that you are trying to resolve)
Is this a solution for window, database, UNIX/Linux, on-prem or cloud offering (public or private).
Timeline
Executive backing (this is critical, introducing change is typically challenging and without executive backing you will stall in your deployment).
Are you looking for best in breed technology or one product to do everything.
What are the integration points within your environment
What is your identity source: AD, IDM, LDAP, etc?
Will this solution be required to integrate with your event management solution or SIEM solution?
Should the product offer an API interface for integration with ticketing system, etc?
Beware of ala cart vendors (vendors that offer low price to get in the door but then nickel and dime you to death for each and every feature they offer)
