Ask HN: Wrap Webforms in SSO

I’m looking for a solution to implement Single Sign On on top of websites that only provides username/password login opens.

I wanna have a central vault of passwords, and allow my employees to login to shared accounts on different systems without exposing the username/password to them.

I’m imagining something like a remote connection to a server that runs a browser in kiosk mode and integrates with a vault, and the browser should not let it be possible for the users to extract the passwords from the webforms.

How do I solve this problem? Is anyone aware of a solution here?