Which two situations necessitate integration of external systems with IBM Tivoli Access Manager for Enterprise Single Sign-On using API published by IBM Tivoli Access Manager for Enterprise Single Sign-On IMS Server？（）

A、to add second factor based authentication to a Web application

B、to pre-populate user wallets with all their application credentials in one go

C、to enhance out-of-the-box audit logging by creating custom audit log events

D、to create reports from audit log trails collected by IBM Tivoli Access Manager for Enterprise Single Sign-On

E、to configure automatic password change on expiry for an application so that the new password is a random string of specified strength