"Identity Manager allows customers to automate the process of creating, updating, and deleting user accounts across multiple IT systems. Collectively, this process is known as provisioning (e.g., creating, updating) and deprovisioning (e.g., deleting). For example, when a new employee joins a company, Identity Manager will automatically run a workflow retrieving the necessary approvals to grant the new employee access. Once these approvals are obtained, Identity Manager will automatically create user accounts allowing the new employee to do his or her job. This may include creating the user account for the new employee in the company's HR systems (PeopleSoft), giving him or her access to ERP applications (SAP) and/or creating an email account (Microsoft Exchange). If the employee changes roles in the company, Identity Manager will update the user account and provide access to the necessary resources required in that new role. When an employee leaves the company, Identity Manager automatically removes his or her user accounts to prevent access. By using Identity Manager, the entire provisioning and deprovisioning process can be automated--saving the customer both time and money."

http://www.securiteam.com/securitynews/5KP0D20N5O.html