pam-onelogin is a pretty complete pam/nss stack for using OneLogin as authentication source (with MFA) and user/group lookups. Primarily used for SSH.
Why do you think that https://github.com/bAndie91/libnss_idmap is a good alternative to pam-onelogin