There was some technical evaluation done, but some features like retention policies and SSO were deemed requirements. Not sure what all of the criteria were or what all of the candidates were, it was a while ago.