If You Are Not Using a Database

If you plan to use your local file system to store Identity Manager data, select a location outside of the application or Web server directory structure. The dynamic directories created for Identity Manager data cannot be protected from intruders who might use a Web browser to scan directories serviced by the Web server. Note that a database is required for production environments and QA/test environments.