2FA and unrestricted access for a specific IP address

I have a tunnel with access restricted by email address. This sends a one time pin for access for some number of hours. I need to retain this for users when they want to gain access.

I also want to include a specific IP address to have a constant unrestricted connection. This is for a third party service.

How can I set these up simultaneously? Thanks