I’ve been using Keycloak for multiple years now, it has some complexity, because it supports about everything OIDC or SAML offer. I used Authentik before, but ran into limitations with its OIDC token mappers and found its Python codebase to be harder to extend than Keycloak with its properly typed Java API