Has anyone seen https://knocknoc.io/ ?
It is a tool to orchestrate a ZTNA like setup locally by changing firewall aliases depending on user authorization.
Should be easy to connect to opnsense with the firewall automation API.
I'd be interested in opinions on the product and the general idea.