What do other large (non-google scale) to medium companies use for authorization? Can anyone recommend open source (preferably) or close source products?

We use Keycloak at our place and are really happy with it.

Website: https://www.keycloak.org/

GitHub: https://github.com/keycloak/keycloak