I ripped Entra ID from one of our projects and replaced it with Keycloak.