DDU or IDM2?

Hi,

Our citrix guys have been using ZfD DLUs in the past for access to citrix,
but now they want to use domain accounts for a number of reasons and
apparently DLU doesn't work for domains. So our choices are either OnDemand
DDU or IDM2. I have never used OnDemand or DDU so I'm not sure what the
advantages/disadvantages are or what is involved in getting it working.

Should I look into using DDU or use IDM2? We currently have DirXML for eDir
to eDir sync, so it would be quite a bit of work to get it upgraded and the
Universal Password populated for our 40,000 users for synchronising to AD.
What's better? I suppose one advantage for IDM2 is that we don't need to
install novell software on the citrix servers.

Thanks

Ben