We have a bunch of websites under re-built and few mobile apps under development. We are looking for a Identity Manager / Server that can be used for authentication and authorisation of the users logging into those portals and apps. I did some a brief research but could't find the answer to my questions below:

1. Does't MIM support OAuth2 / OpenId Connect based authentication protocol?
2. Can we create user profile and add users claims in it?
3. Does it have APIs that portals can call to add users into the user storage?
4. Does it provide API endpoints for change password and forgot password to add self serve password recovery feature on the portals?

I am a developer and have little knowledge about active directory and identity management area.