And the other thing to consider is, in the future there will be a lot less crossover between patchworld and ferment, so the identities won't be duplicates.

I think the answer is to allow either. The user can choose to use system ssb or go ahead and create a new identity (and self serve).