Are there any guides around this topic? I know about ORY Kratos + Oathkeeper but they're both still in early their development.

I'm trying to keep everything in-house so avoiding services like Okta/Ping Identity.