Currently we have MFA turned on for the SMA. Users are prompted to perform MFA when they login each day. We ask that we have the ability to define an IP exclusion or whitelist where users located on the internal network would be exempt from MFA. Currently, OKTA & Microsoft & Citrix provide whitelist capabilities. We would expect the same feature from KACE