u/Theweasels

I am trying to configure Keycloak to require both the password and OTP when connecting from a remote IP, but to only require the password connecting from a local IP.

I have been searching the documentation and the internet and haven't found anything promising. It seems like I would need to set this in one of the Authentication flows but there does not seem to be any condition that would allow me to detect the IP that the request is coming from.

Is this something that's possible? Any resources on the subject would be helpful.