I like Authentik and it's what I use but it seems like it doesn't support per application OIDC via a global application agnostic issuer href using webfinger which seems to basically mean you can only have one OIDC application per hostname unless you do…
