Plus one for Pocket-ID

Dead easy to set up, i don't have to worry about people's weak-shit passwords for local services. Integrates with LDAP if required. Single, tiny (~50 MB) container that uses less than a gig of RAM.

I had 4 services configured, start to finish with automatic account creation if a pocket-id user logged in, within maybe an hour?

Everyone recommends Authelia or Authentik but those are so far and beyond what most self-hosted stuff needs.

I second Pocket ID. I initially set up Authentik, but after discovering Pocket ID and giving it a try, it is way easier to set up and use. Authentik is great if you want to customize everything, but for my needs it was too much. I was able to migrate everything to Pocket ID in an afternoon, whereas Authentik took me several hours over the course of a few days to get set up.

plus one super simple to use. never let me down as oidc for tailscale.

Thank you! Gave it a try after finding Authentik a bit too much for what I currently need it for and it is simple and exactly what I needed.

This one, only hard work is to add your services/apps, some of them are easy like immich and some are strange like beszel. Anyway the docs of pocketID have a lot of guides for different services.