authentik is an open-source identity provider for single sign-on, supporting SAML, OAuth2/OIDC, LDAP and RADIUS, for self-hosted setups from small labs to large clusters.