I made a (incomplete) comparison table of various self-hostable OpenID Connect servers[0].

One of the surprising things to me is just how massive the Keycloak codebase is.

[0]: https://github.com/lastlogin-io/obligator?tab=readme-ov-file...