When you establish a connection between EmpowerID and an external user directory, EmpowerID generates an 'account store object' representing that directory within its internal database, known as the Identity Warehouse. During this process, it duplicates all pertinent user and group information from the external directory, transferring this data to a designated table within the Identity Warehouse. This setup permits synchronization and management in accordance with your specific policies.
With this system in place, you can create, modify, or remove new user and group objects directly within EmpowerID. Additionally, you can administer access rights associated with each of these objects. This administration happens within the EmpowerID environment, providing a centralized platform for managing access and identities.