Seconded. It’s been great as an OIDC provider, but for services I run which don’t support OIDC, it functions great as a reverse proxy auth or LDAP provider too. Was a breeze to migrate users to it from my previous LDAP server