Which two situations necessitate integration of external systems with IBM Tivoli Access Manager for Enterprise Single Sign-On using API published by IBM Tivoli Access Manager for Enterprise Single Sign-On IMS Server？（）

A. to add second factor based authentication to a Web application
B. to pre-populate user wallets with all their application credentials in one go
C. to enhance out-of-the-box audit logging by creating custom audit log events
D. to create reports from audit log trails collected by IBM Tivoli Access Manager for Enterprise Single Sign-On
E. to configure automatic password change on expiry for an application so that the new password is a random string of specified strength