One example. I have been testing smallstep, which puts IDP around ssh (with group management), and also includes a dynamic host catalog (hosts run an agent that phones home to your identity provider).

However, I am very excited about Boundary as it seems to be a much more comprehensive solution.