You can check out RoverApps.com for a solution that would fit your described needs with:
- No VPN required, it has a private secured intermediated link that enables rapid deployment
- Integration with ActiveDirectory for authentication
- Uses NTLM for sessions to SharePoint and other Windows Auth services for SSO
- Multi-factor auth via device access control. Users creds are locked to specific devices.
- Full policy control over the Container app, including PIN, data leak prevention, etc.
- All data encrypted in flight and at rest
- Use SharePoint WebUI on tablets
- Leverage Rovers SharePoint connector for mobile-optimized experiences on Smartphones
- Extend with numerous mobile-optimized apps deployed via the server, no app store hassles
In today’s BYOD mobile world, a container solution like this gives organizations the confidence to deploy rapidly and securely.