Keeto is a module for OpenSSH that enables profile-based administration of access permissions in a central LDAP aware Directory Service, adds support for X.509 certificates, and handles the distribution of OpenSSH key material in an automated and secure manner.
Documentation: https://keeto.readthedocs.io