On the "Enterprise" sso approach, are your first party offerings just plugins? I've worked with various node cms recently, and for our needs we often see the only way to extend is by dangerously forking the upstream rather than hooking in through the plugin architecture.
The second aspect I wondered about, is why Mongo? It doesn't seem as "open" compared to a postgres, although maybe works better for your hosting platform offering. I wonder if an adapter to pg/json might be possible.
Thanks, and good luck with launch!