It might be poor taste to hijack another product's post but I would check out Authentik before commiting to any idP.

It recently started to have enterprise only features lately but its licence ensures they are added to the open source product after a set time period. Super nice developer too.