I’m using PocketID as it is super simple to set up. I’ve also paired it with TinyAuth for those services that don’t support SSO.

I also use Swag as my reverse proxy, which just added native support for TinyAuth.