The ease of use to integrate with other frameworks like AWS IAM/PKI is great! We have not found anything we dislike so far in this integration platform for our customers' identity management needs.
One thing that could be improved would actually require more resources - perhaps additional developers or product managers who understand Identity Governance best practices (elements such as FISMA). Currently looking at ways how we can improve customer experience using their services through better understanding what they offer us but also by allowing them access into some internal applications which are currently only allowed within an organization boundary.