For On-Premises, I think it would make more sense to implement federated authentication, so that customers can use an upstream identity provider. (This is what XMS does)
In fact, with that implemented, we could enable you to choose Cambium’s own SSO as your identity provider.
(Not speaking for Cambium here, just my personal opinion)