Limiting by IP address doesn't seem robust. Neither do I want to rely on someone else's AD.
Any thoughts appreciated?
If it's a major issue, per-seat licensing could also be just the wrong license model.