Getting authentication and federation "right" is tough, and I wouldn't recommend implementing it yourself. I would consider looking into Keycloak, which is an

Getting authentication and federation "right" is tough, and I wouldn't recommend implementing it yourself. I would consider looking into Keycloak, which is an opensource platform similar to Okta/Auth0 that you can self host: https://www.keycloak.org/ https://www.keycloak.org/