Ask HN: How to wrap web login in SSO

I’m looking for a way to implement Single Sign-On (SSO) for websites that only support username/password authentication. I have no control over the target systems and can’t build custom integrations for each.

The goal is to let employees access shared accounts without exposing credentials while ensuring they can’t extract them from login forms.

One possible approach is a remote browser in kiosk mode that integrates with a central password vault, handling logins securely.

Has anyone implemented a solution like this, or know of existing tools that can achieve it?