You could look at using a DualShield authentication server (many authentication options are available ... include Push Authentication). The authentication server can be hosted locally, can protect windows logon, microsoft products (including all 3 outlook options), etc.