I'v never heard anyone mentioning on-premises enterprise option for teams: Crypt-o [1]

LDAP auth, has ACLs, uses on-prem database server.

Why no love? Perhaps because windows-only.

[1]: https://www.soft-o.com/