Maybe Authentik can do what you need? It supports all the various protocols as provider and consumer.