Sorry, I was incorrect because ISW doesn't have a way to prime initially all DS passwords into AD.
Another solution could be based on Sun Access Manager:
- Install Sun Access Manager and cofigure it to use your Ldap or whatever as users credentials repository
- Install the Access Manager Policy Agent on top of the IDM web container (web server or app server where IDM is deployed)
- configure the Policy Agent for IDM (there is specific Sun doc on this)
In this scenario you get a basic SSO between AM and IDM: when a user tries to login into IDM then the Policy Agent intercepts the IDM Login and checks credentials on the AM Ldap.
You could extend this setup to Active Directory, so when a user is already authenticated to AD, then he can enter IDM without login again!