I would gladly pay commercial support for a fully #opensource project than an #opencore one that arbitrarily gate checks ldap/saml/TOTP.
It's much better to have a basic support contract and never use it than to not have it when you need it.