Quick take
Consider Keycloak for teams willing to self-host in exchange for control and lower vendor dependency.
Watch out: Expect meaningful identity and platform operations work.
Capability view
| CAPABILITY | AUTH0 | KEYCLOAK |
|---|---|---|
| SAML SSO | ? | ✓ |
| SCIM | ? | ? |
| Organizations | ? | ✓ |
| MFA | ? | ✓ |
| Audit logs | ? | ? |