There is OTP that integrates with AD. But if you want a full push tool, delegate it somewhere else.