Hanko can be self hosted, if needed - it is one of the few products I chose actively to NOT self host. I am aware of Authentik and do like it.