This was one of the primary reasons I ended up going with Keycloak, it's "batteries included" as far as UI goes. UI for management, impersonation, configuratio

This was one of the primary reasons I ended up going with Keycloak, it's "batteries included" as far as UI goes. UI for management, impersonation, configuration, etc... with RBAC, end-user UI for account preferences, profile, login, password reset, etc... all customizable/themeable. With the switch to quarkus, is has a much more "single binary" feel and is very easy to deploy / configure.