A previous employer used their identity server for a SSO system. It did what we needed it to and seemed like it was well written.