Single Sign-on is great however it automatically add all users from AD into Docuware and assigns them a license automatically.

This process negates the AD user management feature, if they still need to assign licenses manually. Additionally I noticed that ALL AD Groups could be added to Docuware automatically, typically only a subset of AD groups are used in Docuware.