Use Teleport as an identity provider for Infrastructure
Teleport for Infrastructure Access
With Teleport you can configure Teleport to provide single sign on (SSO) identities to infrastructure resources protected by Teleport. When used in combination with role-based access control (RBAC), this allows Teleport administrators to define policies like:
Only members of the "DBA" group can access PostgreSQL databases.
Developers must never SSH into production servers.
Members of the HR group can view audit logs but not production environments.