+1 for SSO. I doubt all 100 services could use SAML or OpenID but you could get a ton of coverage. A password manager isn’t required here because it much bette

+1 for SSO. I doubt all 100 services could use SAML or OpenID but you could get a ton of coverage. A password manager isn’t required here because it much better to control access with SSO. The user can have one password, preferably just logging into their workstation, and then SSO will sign them into whatever apps they are allowed to. Much easier than having a password manager keeping 80-100 passwords. In the past we used a safe credential manager that our NOC could access to get admin or other management credentials for networking devices when problems occurred. You could use the same for DB or server passwords where you need the text and combine it with a password manager if you can auto fill them. Only use these options for systems that don’t have SSO.