Has anyone used Keycloak for Auth in their org/projects? How has been your experience?

Did you start off with Keycloak as the default auth or did you migrate from some other system? If the latter, what was your experience migrating and/or maintaining the system? I'm interested to understand.