would love to see this - we have a password management system which done this. domain credentials for internal or 2 factor for external. works a treat