[vinckr]

Its pretty trivial to support the use cases you mentioned with Ory OAuth2/Hydra and Ory Kratos.

LDAP is harder, but IMO you dont need it unless you operate in a very specific industry.