I would like to integrate the billing to AT

Ensuring a user is added via SSO would be great - and being able to assign the correct group for keeper permissions.

I don't know what Keeper's API supports, but being able to acquire and assign licenses would be more helpful to our existing processes than interacting with the actual credentials would be.