I think I might have it. Set-AdfsRelyingPartyTrust -additionalauthenticationrules 'exists([Type == “http://schemas.microsoft.com/ws/2012/01/insidecorporatenetwork”, Value == “false”]) && ‘exists([Type == “http://schemas.microsoft.com/2012/01/requestc...

Thank you! That’s very helpful. I’m using the AD FS definition…people who authenticated via the web app proxy, so I think want this: -AdditionalAuthenticationRules 'exists([Type == “http://schemas.microsoft.com/ws/2012/01/insidecorporatenetwork”, Va...

Hello @DuoKristina. I am about to enable Duo with ADFS and so I’ve read this post over and over, trying to wrap my head around it. I found this thread after enabling a Global MFA rule, resulting in much the same experience as @TheZealous. Can you e...