LDAP management could be improved, for example when adding a user, if you make a mistake with the e-mail address, then you are stuck because you can't change it (since it's managed by LDAP) and you can't archive the user and create a new one because you can only have one userid in the system with the same name.

Also when importing an LDAP user it would be nice if you could edit fields before saving the user, so that if you know the e-mail address needs to be changed, you can change it. Currently we cannot import users because the e-mail address field has the wrong e-mail address, and once you've created the user, the e-mail address cannot be changed - see above.

Also it would be nice if the check boxes for Jaxx Groups were checked to show which Jazz groups the user is a member of. Currently with LDAP they are not marked, so the only way to know is by figuring out which Windows groups the user belongs to, and looking in the web.xml file that maps Jazz groups to Windows groups!