Which two situations necessitate integration of external systems with IBM Tivoli Access Manager for Enterprise Single Sign-On using API published by IBM Tivoli Access Manager for Enterprise Single Sign-On IMS Server？（）

A.to add second factor based authentication to a Web application

B.to pre-populate user wallets with all their application credentials in one go

C.to enhance out-of-the-box audit logging by creating custom audit log events

D.to create reports from audit log trails collected by IBM Tivoli Access Manager for Enterprise Single Sign-On

E.to configure automatic password change on expiry for an application so that the new password is a random string of specified strength