During the past three years, cloud-based identity and access management (IAM) solutions have become a viable and cost-effective alternative to on-premises, commercial off-the-shelf (COTS), or in-house IAM systems. However, cloud-based solutions bring their own risks and challenges, so to help security and risk (S&R) professionals select the right cloud offering, we identified the 15 most important questions and requirements that any enterprise considering a cloud IAM offering should include in their request for proposal (RFP) and vendor negotiations.