How to effectively implement single sign-on (SSO) for enterprise clients?

Vanilla

We're getting more requests from enterprise customers about SSO implementation. They're asking for support for various identity providers (Okta, Azure AD, Google Workspace). What's the best approach to implement SSO that's both secure and scalable? Should we support multiple providers from the start or focus on one initially? Any experiences with specific authentication protocols or frameworks would be helpful.