If the company is big enough they'll probably use RADIUS or TACACS for the VPN authentication. That's easily setup and maintained from a central location.