And, yet, everything is still a pain in the ass.
We were looking at Auth0 precisely because Okta was doing the enterprisy thing. Sigh.
The system the keys are a part of, not so much.
I want to hand anybody in my company 3 keys each (normal, backup, and emergency) and I want them to log into everything with those keys.
This is so mind-bendingly difficult to implement that I simply give up every time I try.
After you kill yourself putting it all together, you can generally make logging in with the keys sorta work. And then you have to cancel and replace a key that somebody lost.
And then you realize all the corner edge cases that don't work.
Or, somebody leaves your company and they're the administrator for something on GitHub and now you can't transfer it without their help. And, if you've destroyed the keys, you're shit out of luck.
Anything to do with keys is second-class relative to the password flow because that's what everybody uses.
Which presumably means that all authentication is done via hardware keys (like yubi or similar).