https://github.com/jr200/nats-iam-broker Works .

Any login system can be mapped to oidc and into nats auth called out.

The setup is easy and it’s highly extensible to any auth system. For example I use it with passkeys , but that’s just my bend :)