The best about this product is that it has everything, from access control to SSO (Single Sign On). It also supports SAML 2.0 as well as OAuth2 protocols; I like how easy of use it is too! There are several things which can be improved though such as:- Access Control - Support many more authentication providers.- UI could look better.- If you have users who need different levels of permissions then there should be an option in the console so they don't have to go into each app/system separately to change their permission level.- In some cases when using LDAP integration we get errors where it says "invalid ldap search filter". This happens sometimes but not always. We had issues connecting to ADFS servers or other external systems because our domain wasn’t setup correctly. Once we got those resolved all worked fine again.