MCB on-prem/off-prem

[Rich Graves]

I asked this some months ago; search archives for the first thread involving my email. The answer is no, unless you want to maintain your own Java code.

However, if your second factor happens to be Duo, you can define "trusted IP" ranges at that layer.

FWIW, I *want* people exposed to the second factor challenge while within range of tech support. Only classrooms are whitelisted. I rely on a saved "trusted device" cookie (again, at the Duo level) to reduce the annoyance factor regardless of IP location.