Keycloak

Authentication Web Proxy

Current Team Compute default is APISIX

Alternatives

For web application that does NOT have built in OIDC or SAML, instead of using APISIX, other proxy can be put in front as an extra layer of protection.