How does IBM ISAM work?

Could you elaborate on the inner workings of IBM's Identity and Access Management (ISAM) system? How does it securely manage user identities and access privileges across various applications and services? What are some of its key features and benefits that make it a popular choice for organizations looking to streamline their security posture?