Ability to require MFA based on IP allowlists

Problem Description

User from non-whitelisted IP addresses cannot be authenticated through MFA

Suggested Resolution

Allow users from non-whitelisted IP addresses to be able to go through MFA

Why this is important?

Customer would like to control MFA based on IP addresses. For users within IP allowlist, are not required to login with MFA but for users from outside of IP allowlist are required to login with MFA

Workaround

Currently we can require MFA against user accounts via Authentication Policy with Atlassian Access. The possible workaround could be done from IDP end outlined in the community post:

• https://community.atlassian.com/t5/Atlassian-Access-questions/2FA-note-required-when-on-an-approved-work-site-IP/qaq-p/1850209