We (FusionAuth) cover most of this. I think we do bilateral and multilateral SAML. More details in our docs: https://fusionauth.io/docs/v1/tech/core-concepts/integration...

We do OAuth, OIDC, and idp routing based on domain or id. We track ips and have the ability (in the Enterprise tier) to add IP ACLs, but I am not sure what you mean by IP authentication.

I am not sure what you mean by wayfless, not familiar with that term.

Feel free to reach out to me for more info if you'd like to chat, my contact info is in my profile.