There's always keycloak you can rollout yourself. It's not trivial but it's quite doable.

watusername 6 days ago | parent | next [-]

Instead of Keycloak, I would recommend giving Kanidm a try: It's much more lightweight and covers most of what you usually need (one notable exception being SAML).

https://github.com/kanidm/kanidm

▲

walterbell 6 days ago | parent | prev [-]

Thanks for the pointer, https://news.ycombinator.com/item?id=47649354

edit: looks like there are affordable managed hosting providers for keycloak.

	▲	gchamonlive 5 days ago \| parent [-]
		I was a long time k8s skeptical, but I think it's solid now. If there's good support for keycloak for k8s with support for backups I wouldn't think twice. Not sure the state of keycloak now, but it was a lot of work to manage keycloak configs with the IaC pipeline. That could have gotten better now, but I think having access to the data is important because migration might not be trivial if for instance a provider starts acting up.