I would just set the iPad to be
on a VPN[
^] then only expose the site to the intranet. You can then use VPN security to make sure that devices that belong to the company are on the network and if a device becomes stolen/lost you can disable access for that device.