Great insight in this topic. It's something we struggle on our still new WF instance. Could you share how you went about setting up the auto provisioning of user accounts? Is this done on WF side or SSO side? I can't seem to find good resource on this. Appreciate any feedback.