When using the VMware VeloCloud Admin UI we can use WS1 Access as IDP , so we do need to manually provision the users , add the roles and set the unsecure Passwords. Instead we can use the full power of Workspace ONE Access with Multi Factor Authentication , SSO and all the nice things