vpc gateway setup for webapp and multiple users

hello, i’m responsible to take our on-premise web crm (sugarcrm) and put on the cloud, as more sales people are working remotely.

we’re very concerned about security, thats why we want to put it on a vpc, but are not sure the “logistics” of the users authentications.

they would be login in from their homes so they would have different and dynamic ips.

additionally we would like to have granular control on what they are accessing and have for example schedules (theu can access the vpc fr 8 to 5).

i envision some kind of web app gateway, where they login and there they get their privilages to access x,y, or z server.

but im not sure where to start.

the info i’ve found is just to forward the ports on the gateway droplet, but that doesn’t seem to make much sense on our scenario.

any ideas o help?

kind regards!

r. malla