A user is a known registered identity that is unique in Digital Access component. A user can request access to a resource or get a ticket (SAML) for access to other systems.
To control what resources a user can access, a user account is needed in the Digital Access component. The user accounts can be linked to user information already stored in your company's directory service (for example, Microsoft's Active Directory). By combining user accounts, user groups, user storage and identity management, you control which users access what applications and how.