I’ve been using Keycloak for multiple years now, it has some complexity, because it supports about everything OIDC or SAML offer. I used Authentik before, but ran into limitations with its OIDC token mappers and found its Python codebase to be harder to extend than Keycloak with its properly typed Java API

I could do that, wouldn’t lose a bit, but I hesitate anyways because downloading a few TB over a 300 Mbit/s Internet connection isn’t fun at all and takes a shitload of time