WebFinger + self-hosted Oauth provider is indeed nice. Unfortunately not widely available.

Take a look at Google's FedCM protocol as well