We’re about to commit to giving SSO to some clients who have requested it. They will accept either OIDC or SAML (though we have suspicions they’ll turn around and want SAML later on for the Single-Sign-OUT methods)

I personally haven’t worked on SSO systems in a while, what’s the current best practice here?

• Auth0 / Stytch, some 3rd party provider like that?
  • Find some provider with elixir libs/SDKs?
• Use a library to run it in house?

It’s a handful of customers, no real scaling issues or anything, I’m mostly concerned with correctness, predictability and maintenance costs. Happy to pay a 3rd party if it makes our lives easier and doesn’t introduce critical failure points or risks.

I’m really grateful for feedback from anyone who’s got more experience with SSO like this.