vIDM could be improved with the multi-tenant capabilities that VMware tends to offer—features like customization branding and the integration of the app catalog based on the branding. Since the integration has been at top-level OGs, you were not able to then do rebranding if you were required to use specific user groups to highlight specific applications. At the time, I was personally opening feature requests for these things. I haven't worked with the latest release, so I don't know if these features were already deployed or not. 

The license could be better. You can't simply license access to services for devices - you have to license the product to users. The problem with that is some companies don't have licenses for the whole user catalog and just offer licenses for the devices themselves, meaning they aren't directly attached to a user. That's the main problem of Identity Manager.

Using the solution on Android requires a special setup, the mobile SSO doesn't work as well. It would be easier if it was integrated and we could do it similarly to the iOS SSO setup.