Hey there @stefan6 welcome to the community!
With the requirement of not redirecting to Auth0, your only option is an embedded approach. Good to know you are aware of the potential pitfalls there - Universal Login is strongly encouraged over embedded.