Ory seems like a modular Keycloak, they don't seem to support SAML as a Service Provider yet which is the one thing we do well.