WebFinger + self-hosted Oauth provider is indeed nice. Unfortunately not widely available.