Why not Okta? I know a company that uses it and no AD. (But they are mostly Mac)