I use auth0.com configured with a few providers in a passwordless mode. You can see it in action here: https://www.lfgss.com/ https://www.lfgss.com/ For most

I use auth0.com configured with a few providers in a passwordless mode. You can see it in action here: https://www.lfgss.com/ https://www.lfgss.com/ For most users this is one-click after the first sign-in, and only a couple of clicks that first time. If they can't do this, it's the email code flow. It works brilliantly, and no provider can disappear in a way that cripples my site. I only have to verify a user owns an email address and I'm back up and working. I love this. I know nothing that puts me at risk beyond the email address, which I need for operational reasons anyway (it's a forum, notifications get sent via email).