[BillinghamJ]

Less techy employees shouldn't be on any private/internal networks. Just give them an HTTPS web panel to work on authenticated by the SSO system.

[itaifrenkel]

SSO is not enough. In secure systems you are ussually required to provide both network access, and applicative access restrictions