You can configure the system to allow new users to request an account in the internal database. This is known as enrollment. Users who already have accounts in the internal database or any other identity source do not need to enroll. By default, such users can access the Self-Service features that you configure.
At enrollment, users must select a security domain into which they want to be enrolled. You configure Self-Service to determine whether users must also do the following.
Configure a user profile.
Configure security questions.
Select a user group.