Installing Identity Managersection in the Identity Manager 3.0.1 Installation Guide.
Also, we recommend that the server hosting the Active Directory driver be a member of the Active Directory domain. This is required to provision Exchange mailboxes and synchronize passwords. If you don’t require these features, the server can be a member of any domain as long as the Simple (simple bind) authentication mode is used. To have bidirectional password synchronization function, the Negotiate authentication option must be selected.