This is how Okta's Advanced Server Access works: https://www.okta.com/products/advanced-server-access/