Sensitive data stored by an Identity Management System should be Encrypted. This typically includes personal user profile data, passwords used to sign into and manipulate Managed Systems, etc.

Return to IT Security Concepts