ZITADEL alternatives compared by the reason you are leaving, from the AGPL license and free tier limits to operations and tenancy fit. Covers Keycloak, Authentik, Authelia, Ory, and managed options, and how to tell whether permissions, not the identity provider, are the layer that is failing