In case that’s too many acronyms,
A UI-first Identity Access Management (IAM) / Single-Sign-On (SSO) platform supporting OAuth 2.0, OIDC, SAML and CAS, integrated with Casbin RBAC and ABAC permission management. Supports third-party applications login, such as GitHub, Google, QQ, WeChat, etc., and other plugins can extend the third party logins Casdoor can use.
I’d definitely suggest checking out Keycloak. It’s still the best I’ve used as far as being intuitive and standards compliant.