Your comments

A more flexible method would be to use SAML based logins maybe?