Single Sign-On and Provisioning suggestions

We are looking for a way to provide single-sign and provisioning for around 130 Macs and 130 PCs. Does anyone have experience with OneLogin, Okta or F5? It sounds like even LastPass has a new offering in this arena. We had a demo for OneLogin and it looks pretty solid. Even provides the ability to sync keychains with AD on Macs–which would theoretically remove the need to deploy Nomad. New user creation and maintenance also looks really solid. I’d love to hear anyone’s experiences in this area!