Is there someting which does "Authpf" like things, only via a website ? So the users authenticates on the website, then the firewall rules are loaded!
Another idea I have is to simply have users authenticate, then they can download a ssh key with which they can login.