What are you using for SSO and password updates?

I currently have a mix of Windows, Mac and ChromeOS and will be replacing about 95% of my Windows boxes with ChromeOS in the future. I’m looking for something like OneLogin or Okta that will do SSO, Password updates to AD & G Suite, Password restores that is cost effective for a church. I have about 100 users, 60 of which are paid employees that I need to mange using this. What are you using to keep SSO working, and do Password updates?