Keycloak (http://www.keycloak.org/ http://www.keycloak.org/) is quite easy to deploy. For our usage, even that was overkill and we are using Ipsilon (https://i

Keycloak (http://www.keycloak.org/ http://www.keycloak.org/) is quite easy to deploy. For our usage, even that was overkill and we are using Ipsilon (https://ipsilon-project.org/ https://ipsilon-project.org/), with IPA backend. It is more quirky, docs are scarce, but it works for us. On app side, it is mod_auth_mellon.