There are many good alternatives to Keycloak that administrators may prefer - nice modern open source examples being ZITADEL and the Ory stack.

It would be great to have the auth provider abstracted to allow for different providers based on ogranization needs and preferences.