Would be really nice to have saml support for single sign on (ideally in both the cloud control offering and in the self hosted that is probably forthcoming). This would be amazing combined with the one ssid, multiple password feature so each user could be tagged into a vlan based on info returned from saml. Everybody that I have tried fails at this currently, including my current fortigate solution at work that was quite a lot more expensive than your hardware.