Tools/Keycloak
Keycloak
Full-featured open-source identity provider — SSO, SAML/OIDC federation, social login, and user management. Most-used open-source alternative to Amazon_Cognito (app identity), AWS_IAM_Identity_Center (SSO), and the authentication half of IAM (paired with Open Policy Agent for the authorization/policy half). Ory (Kratos + Hydra) is the common modular alternative.