Local password vs IDP sso based on trusted vs untrusted network

Hi,

Following is my requirement. How can this be achieved?

User Category	Trusted Network	Untrusted Network
Category 1	Both IDP SSO and local username password allowed	Only local username and password login method allowed
Category 2	Only local username and password login method allowed	Block
Category 3	Only local username and password login method allowed	Block
Category 4	IDP SSO	Block