Is Ory overkill for small to medium enterprise? It feels it is more complex to setup 🙂

Generally no but as always it depends ;) In most cases you would be fine with using the Production or Growth plan on Ory Network for small businesses - in that case it's really easy to setup. Or when selfhosting just using Ory Kratos, it's also not too hard to run if you have experience self-hosting Really hard to have a “blanket” answer to this without knowing more. But feel free to dm/email me if you don't want to share more details on your use case publicly.

Let me explain what I got few days ago and what I am trying to do. I am working in a company providing vehicle sales platform. We have something like this: manufacturer -> importer -> dealers.

Your B2B hierarchy fits well with Ory's Organizations feature. OIDC and SAML are first-class supported, so each importer can configure their own identity provider. LDAP isn't out-of-the-box but we've helped customers bridge it. Belgium/Estonia e-ID typically expose OIDC endpoints, so they should plug right in. Self-hosting is fully supported but requires an Ory Enterprise License for the Organizations feature. That said, before committing to self-hosted: can you share which regulation you are working with? Ory Network offers isolated tenants, SOC2, GDPR, and data residency options. Depending on the details, managed infrastructure sometimes simplifies compliance rather than complicating it. Happy to go over the details if you can share more.