I haven't used any of these myself, but you might want to take a look at Facebook's approach to the problem[0]. It's rather different and innovative. You might

I haven't used any of these myself, but you might want to take a look at Facebook's approach to the problem[0]. It's rather different and innovative. You might also find Smallstep [1] and SSH Lockbox [2] interesting. [0] https://engineering.fb.com/security/scalable-and-secure-access-with-ssh/ https://engineering.fb.com/security/scalable-and-secure-acce... [1] https://smallstep.com/blog/diy-single-sign-on-for-ssh/ https://smallstep.com/blog/diy-single-sign-on-for-ssh/ [2] https://github.com/half-cambodian-hacker-man/ssh-lockbox https://github.com/half-cambodian-hacker-man/ssh-lockbox