keycloak is an easy to use easy to deploy idp
We are currently focused on refining the SAML SSO integration. We abstract away SAML login as an OAuth 2.0 flow so that it plugs in seamlessly where a Google or Github login (for instance) would in your tech stack.
Regardless, this is a solution for your application that doesn't require running something like Keycloak. If I was developing an application I'd be looking at this, Auth0 or WorkOS to get the features my customers are demanding. (SSO/SAML/OAUTH mostly). Keycloak does the opposite, as a business I could deploy Keyclock to be my SAML IDP, but still need my applications to support SAML.