The IBM Security Access Manager is a highly scalable and integrable Federated Access Management. It is among the market leader and thanks to virtual appliance or Docker integration fast to bring up. There is a cloud solution in place as well. ISAM is not an Access Manager on it's own, it brings powerful Reverse Proxy and Web Application Firewall (read more about WAF at wikipedia) functions with it. ISAM has a very agile developer team behind and adapts to new requirements fast. The default functions of ISAM are flexible extendable and customizable by server side javaScript code including the capabilities to use the integration of Java libraries. ISAM is easy integrable with the IBM Identity Management and MaaS360, the IBM Mobile Device Management. However it's flexible to integrate in other environments and supports the usual standards like SAML and OIDC of course. You definitely should take a look at ISAM, when it comes to the need of a central identity provider.
Read more about MaaS365 at IBM