Keycloak: RedHat Engineering at its usual piss-poor level, plus the mediocrity of Java projects, mixed with the complexity of every enterprise customer. Result: "hey, you can get it to work eventually!"
The UI might look a little outdated, but that's a admin ui anyhow. Lately even that got better.
Cannot recommend KC enough. Even kenning locally on our dev boxen, it never failed on us.