MFA Enforced for O365Global admins - Trusted IPs bypass not working for Azure MFA server on-premise

[Mohan Seenippandian]

We have Azure MFA server on-premises  and enforced MFA for all global admins (federated and cloud users). Now we would like to enable Trusted IPs to bypass MFA for some IP ranges. So configured the Trusted IPs in the cloud. Looks like the trusted IPs bypass is not working for Azure MFA server' users (federated users who use Azure MFA on-premise). However works for cloud user who use Azure MFA online.  Any solution to get this working for both federated and cloud users. Evaluated conditional access policy, but enforcing MFA meets the requirement as we would like to ensure the admins use approved clients and PowerShell modules with no app passwords to connect to O365 services.

Thanks.

[#2]

Trusted IPs only apply to Azure MFA, not the MFA server. There's a similar option in the MFA server settings on-premises, but it only applies to the User portal, afaik. You can easily configure bypass via the AD FS claims rules though, or simply enforce MFA only when the request is coming from the WAP server (externally).

[#3]

Thanks.