I've replaced keycloak with https://goauthentik.io/ 2 years on, no complaints