Please allow full Active Directory integration. This is a huge omission.
It seems silly to have released a product promoting windows domain SSO without the ability to be able to pull accounts through from active directory. Am I missing something?