SSO (Google, Microsoft, GitHub) is available on all tiers. Custom OIDC provider support is even available in our ~MIT~ (Apache2) licensed community edition if you self host Distr.
Even TOTP MFA is available for all users and part of the community edition.
How can we improve in reducing SSO tax?