keycloak is great, it's very flexible and fairly lightweight (all things considered). it can get a bit complex, but to be fair the whole oauth/oauth2.0/openid/

keycloak is great, it's very flexible and fairly lightweight (all things considered). it can get a bit complex, but to be fair the whole oauth/oauth2.0/openid/openid-connect/saml is quite messy in general.