There are two parties: the organization, who verifies the identity, and a user, whose identity needs to be verified. What does an organization need to have, a usual computer, software, something else?