Company X has LDAP integrated WiFi (EAP TTLS/PAP). When employees connect to WiFi, they can access the public internet. However they don't have access to internal resources (for example database ports, hadoop ports etc). To access internal resources, they need to get on a VPN (SSL VPN) which used the same LDAP credentials used to access WiFi.
Question: Does the VPN make it any more secure (it uses the same password)? What would be the downside of making internal resources accessible after WiFi access? Any critique of this set up?