Probably Cognito if they're willing to pay for it, but strictly speaking I suppose the answer is to just ask those IdPs to start supporting OIDC in the long term. -- Scott