For example, take a Hashicorp vault, a very simple example will extract a password like this
PASSWD=`vault kv get -format=json secret/hello | jq -r .data.data.root`
so when you echo $PASSWD you get the password.
This might be a generic case for any vaulting product and could work for more products but I don't know that for sure.
The problem we see with BIUL is that passwords change all the time and get rotated frequently so the base facility in BIUL for credentials does not lend itself well to rotating passwords unless you have PBPS, which we have here but there is also TPAM and most likely Hashicorp Vault.