as a policy, SAP access is not extended over Internet ... so they have to work from the office premises only and they are not supposed to carry out any financial transactions beyond their duty hours ....
is there any way it can be managed like a typical database or windows AD where the login sessions can be defined based on time.