An open-source identity provider: OIDC, MFA and social sign-in as configuration. r10c signs users in through it and stores no password.