mayhem and zas : question for you two since you would be the primary folks managing things w/i this system in future...
for management of SSO'd users/groups and app integrations for MeB (not end users of MeB services), _all other considerations being outside the scope of this particular question_, would you prefer:
* command line only, web UI from the maintainers a future possibility, anything developed on our side would extend CLI calls; or
* web UI primary, API available for making calls & official API libraries are available for js/ts/go/python, but no CLI available out-of-box
this informs the selection of identity providers for the SSO project