google as authentication server

Hi

We use google biz apps for our email system. and I would like for users to be able to use that username/login for vpn access to our companys internal network (rather than hand creating all with unique passwords)


does anyone have any idea where to start 1) if its possible and 2) if it would be adviseable


Thanks

rob