Google workspace - Force MFA if school IP isn't detected - Is this possible?

[Jaan]

We're currently using context aware login for our user accounts, we don't currently have MFA for our student users. I'm really wanting to push this. However the powers that be say its to intrusive in the classroom.

 

I can find an option to only allow login if the user is attempting to login via our IP. I'd like to force MFA if our IP isn't detected, and disable MFA if the IP is. This would only be for our student group as are all setup for MFA on and offsite.

 

Anybody managed this with Google admin panel?

 

Cheers

[RLR]

I think this option is only available for Microsoft logins. This is not possible for Google Logins unless you redirect Google to use Microsoft.

[howartp]

As above, we've pointed Google to use Azure for all our MFA/etc.

[Jaan]

Ah ok thanks