I’ve been tempted, but it doesn’t support multilateral SAML federation, which is almost mandatory for higher education, which is 100% of my customer base.

But it’s definitely easier to live with than Active Directory or SecureAuth.