Self-hosted password manager - what do you know?

Question

Project management

Good day.

Colleagues, tell me - who knows what from self-hosted password managers?
What do you need:

• Ldap authentication and authorization - for each entry (group of entries) you can set ldap groups that can see / edit these entries
  
• Actually self-hosted (more secure, no need to shine into the world of the manager and / or ldap for authorization)
  
• Possible triggers for changing records - alerts if someone changed the password
  

Everything that looked (for example Bitwarden) is not able to centrally add records and access control. I don't want to reinvent the wheel, I'm sure that this has already been invented before me :)

PS: Maybe I'm looking in the wrong direction? How do you store and distribute passwords? Yes, I know that it is better to have centralized authentication systems and individual accounts, but this does not solve the problem of external services and their accounts to which, by the will of fate, you need to have access to more than one person and sometimes you need to change the password ...

Answer 1

https://www.keycloak.org/