LBAC security and MFA

Summary

Apply LBAC security and only enforce MFA for users accessing outside of IP range

Content

Hi,

Starting to implement Cloud HCM and ERP and I have the following use case to implement security so am just wondering if what I’m suggesting will work or is there a better way to do it?

We want to restrict access to full HCM and ERP functions to our own IP range but allow staff to access HCM self service from anywhere and any device. In order to do so we are looking at LBAC and then setting one limited role as self service accessible from any IP.