[sneakerblack]

Try JumpServer:

https://github.com/jumpserver/jumpserver

Its an open-source PAM solution

We're not using it in-house (we're actually using teleport), and I haven't tried it, but I've heard many good things about it