The existing /users endpoint lists built-in system users. I've been using it to test my work on role assignment in the console, but I will need IdP users for it to really work.

Because we know the silo from the authenticated user, I don't think we need the silo in the path. That makes me wonder if we should use /users for silo users and rename the system users endpoint (/system_users etc).